Hardware-based encryption: Difference between revisions

Revision as of 09:11, 11 February 2018

Latest revision as of 08:34, 16 August 2025

(17 intermediate revisions by 13 users not shown)

Line 1:

{{Short description|Use of computer hardware to assist software in the process of data encryption}}

{{Infobox industrial process

|type=[[Cryptography]]

Line 6 ⟶ 7:

|caption = The [[IBM 4758]] Cryptographic Module

}}

'''Hardware-based encryption''' is the use of [[computer hardware]] to assist software, or sometimes replace software, in the process of data [[encryption]]. Typically, this is implemented as part of the [[CPU|processor]]'s [[Instruction set architecture|instruction set]]. For example, the [[Advanced Encryption Standard|AES]] encryption algorithm (a modern [[cipher]]) can be implemented using the [[AES instruction set]] on the ubiquitous [[x86 architecture]].<ref name="Intel AES Instructions" /> Such instructions also exist on the [[ARM architecture]].<ref name="cortex cryptography" /> However, more unusual systems exist where the cryptography module is separate from the central processor, instead being implemented as a [[coprocessor]], in particular a [[secure cryptoprocessor]] or [[cryptographic accelerator]], of which an example is the [[IBM 4758]], or its successor, the [[IBM 4764]].<ref name="IBM 4764" /> Hardware implementations can be faster and less prone to exploitation than traditional software implementations, and furthermore can be protected against tampering.<ref name="performance" /> However, hardware implementations use additional space on the processor die, and any security vulnerability (such as [[Spectre (security vulnerability)|Spectre]]) cannot be solved with a software update.<ref name="MeltdownSpectre" />

== History ==

HardwarePrior to the use of computer hardware, cryptography could be performed through various mechanical or [[electro-basedmechanical]] encryptionmeans. arguablyAn beganearly inexample is the 1987[[Scytale]] withused by the [[Spartan]]s.<ref name="Kelly">{{Cite journal|last=Kelly|first=Thomas|title=The Myth of the Skytale|journal=Cryptologia|date=July 1998|pages=244&ndash;260|doi=10.1080/0161-119891886902|volume=22|issue=3}}</ref> The [[Enigma machine]] was an electro-mechanical system cipher machine notably used by the Germans in [[World War II]].{{citation needed|date=June 2018}} After [[World War II]], purely electronic systems were developed. In 1987 the ABYSS (A Basic Yorktown Security System) project was initiated.<ref name="ABYSS" /><ref name="building 4758" /> The aim of this project was to protect against [[software piracy]]. However, the application of computers to cryptography in general dates back to the 1940s and [[Bletchley Park]], where the [[Colossus computer]] was used to break the encryption used by German High Command during [[World War II]]. The use of computers to ''encrypt'', however, came later. In particular, until the development of the [[integrated circuit]], of which the first was produced in 1960, computers were impractical for encryption, since, in comparison to the portable [[form factor (design)|form factor]] of the [[Enigma machine]],<ref name="Crypto Enigma" /> [[SIGSALY|computers of the era]] took the space of an entire building. It was only with the development of the [[microcomputer]] that computer encryption became feasible, outside of niche applications. The development of the [[World Wide Web]] lead to the need for consumers to have access to encryption, as [[online shopping]] became prevalent.<ref name="consumers" /> The key concerns for consumers were security and speed.<ref name="consumers" /> This led to the eventual inclusion of the key algorithms into processors as a way of both increasing speed and security.<ref name="performance" />

== Implementations ==

Line 22 ⟶ 25:

* [[IBM 4758]] – The predecessor to the [[IBM 4764]].<ref name="NIST approval" /> This includes its own specialised processor, [[Random-access memory|memory]] and a [[Random Number Generator]].<ref name="IBM 4758 datasheet" />

* [[IBM 4764]] and [[IBM 4765]], identical except for the connection used.<ref name="NIST approval" /> The former uses [[PCI-X]], while the latter uses [[PCI-e]].<ref name="IBM 4764" /> Both are [[peripheral devices]] that plug into the [[motherboard]].

=== Proliferation ===

[[Advanced Micro Devices]] (AMD) processors are also x86 devices, and have supported the [[AES instruction set|AES instructions]] since the 2011 [[Bulldozer (microarchitecture)|Bulldozer]] processor iteration. <ref name="Arecibo Bulldozer" />

Due to the existence of encryption instructions on modern processors provided by both [[Intel]] and AMD, the instructions are present on most modern computers.<ref name="Haifa" /> They also exist on many tablets and smartphones due to their implementation in [[ARM architecture|ARM processors]].<ref name="Haifa" />

Line 31 ⟶ 35:

== Disadvantages ==

If, however, the hardware implementation is compromised, major issues arise. Malicious software can retrieve the data from the (supposedly) secure hardware – a large class of method used is the [[timing attack]].<ref name="BearSSL" /> This is far more problematic to solve than a software bug, even within the [[operating system]]. [[Microsoft]] regularly deals with security issues through [[Windows Update]]. Similarly, regular security updates are released for [[Mac OS X]] and [[Linux]], as well as mobile operating systems like [[iOS]], [[Android (operating system)|Android]], and [[Windows Phone]]. However, hardware is a different issue. Sometimes, the issue will be fixable through updates to the processor's [[microcode]] (a low level type of software). However, other issues may only be resolvable through replacing the hardware, or a workaround in the operating system which mitigates the performance benefit of the hardware implementation, such as in the [[Spectre (security vulnerability)|Spectre exploit]].<ref name="PCW-20180109" />

==See also==

* [[Disk encryption hardware]]

* [[Hardware-based full disk encryption]]

* [[Hardware security module]]

==References==

{{Reflist|30em|refs=

<ref name="Intel AES Instructions">{{cite book|title=Intel® 64 and IA-32 Architectures Software Developer’sDeveloper's Manual|date={{date|December 2017}}|url=https://software.intel.com/sites/default/files/managed/39/c5/325462-sdm-vol-1-2abcd-3abcd.pdf|publisher=Intel|pages=303–309, 410}}</ref>

<ref name="cortex cryptography">{{cite book|title=ARM® Cortex®-A57 MPCore Processor Cryptography Extension|date={{date|17 December 2017-12-17}}|publisher=ARM Holdings|url=http://infocenter.arm.com/help/topic/com.arm.doc.ddi0514g/DDI0514G_cortex_a57_mpcore_cryptography_trm.pdf|deadurlurl-status=nolive|archiveurlarchive-url=https://web.archive.org/web/20161213102201/http://infocenter.arm.com/help/topic/com.arm.doc.ddi0514g/DDI0514G_cortex_a57_mpcore_cryptography_trm.pdf|archivedatearchive-date=2016-12-13|df=}}</ref>

<ref name="IBM 4764">{{cite web|url=https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_61/rzajc/rzajcco4758.htm|title=4764 Cryptographic Coprocessor|publisher=IBM|access-date={{date20 January 2018|2018url-01-20}}|deadurlstatus=nolive|archiveurlarchive-url=https://web.archive.org/web/20180121000028/https://www.ibm.com/support/knowledgecenter/ssw_ibm_i_61/rzajc/rzajcco4758.htm|archivedatearchive-date=2018-01-21|df=}}</ref>

<ref name="performance">{{cite web|title=AES-NI Performance Analyzed|url=http://www.tomshardware.com/reviews/clarkdale-aes-ni-encryption,2538.html|publisher=Tom's Hardware|year=2010|author=P. Schmid and A. Roos |accessdateaccess-date={{date|20 January 2018-01-20}}}}</ref>

<ref name="MeltdownSpectreABYSS">{{Citecite web |author=Staff |url=https://spectreattackwww.comcomputer.org/ csdl/proceedings/sp/1987/0771/00/07710038.pdf|title=MeltdownABYSS: andA Spectre |date=2018 |work=[[GrazTrusted UniversityArchitecture offor Technology]]Software Protection|access-date={{date|2018-01-20}} January 2018|deadurl-urlstatus=no live|archive-url=https://web.archive.org/web/2018010322134520180121071623/https://spectreattackwww.comcomputer.org/csdl/proceedings/sp/ 1987/0771/00/07710038.pdf|archive-date={{date|2018-01-03}}21}}</ref>

<ref name="ABYSSbuilding 4758">{{cite web|url=httpshttp://www.computerresearch.orgibm.com/csdlpeople/proceedingss/spsailer/1987publications/07712001/00/07710038ibm4758.pdf|title=ABYSS:Building Athe TrustedIBM Architecture4758 forSecure Software ProtectionCoprocessor|access-date={{date|20 January 2018-01-20}}|deadurlpublisher=no[[IBM]]|archiveurlurl-status=live|archive-url=https://web.archive.org/web/2018012107162320170808032012/httpshttp://www.computerresearch.orgibm.com/csdlpeople/proceedingss/spsailer/1987publications/07712001/00/07710038ibm4758.pdf|archivedatearchive-date=20182017-0108-21|df=08}}</ref>

<ref name="buildingCrypto 4758Enigma">{{cite web|url=http://www.research.ibmcryptomuseum.com/people/skits/sailerenigma/publicationssupport/2001files/ibm4758case.pdf|titlepublisher=BuildingCrypto the IBM 4758 SecureMuseum|title=Enigma-E Coprocessorcase|access-date={{date20 January 2018|2018url-01-20}}|publisherstatus=[[IBM]]live|deadurl=no|archiveurlarchive-url=https://web.archive.org/web/2017080803201220161105032157/http://www.research.ibmcryptomuseum.com/people/skits/sailerenigma/publicationssupport/2001files/ibm4758case.pdf|archivedatearchive-date=20172016-0811-08|df=05}}</ref>

<ref name="Crypto Enigmaconsumers">{{cite web | url=http://wwwecommercenews.cryptomuseum.comeu/kits/enigmaconsumers-online-shopping-expectations/support/files/case.pdf |publisher title=CryptoConsumers and their online shopping expectations – Ecommerce News Museum|title date=Enigma-E20 February 2015 case| access-date={{date29 August 2016 |2018 url-01-20}}|deadurlstatus=nolive |archiveurl archive-url=https://web.archive.org/web/2016110503215720160930235730/http://wwwecommercenews.cryptomuseum.comeu/kits/enigma/supportconsumers-online-shopping-expectations/files/case.pdf |archivedate archive-date=2016-1109-05|df=30 }}</ref>

<ref name="Oxford">{{cite web|url=https://www.cs.ox.ac.uk/teaching/materials17-18/ca/lecture03.pdf|title=x86-64 Instruction Set|publisher=[[University of Oxford]]|pages=1|date={{date|18 April 2017-04-18}}|access-date={{date|24 January 2018-01-24}}}}</ref>

<ref name="consumers">{{cite web | url=http://ecommercenews.eu/consumers-online-shopping-expectations/ | title=Consumers and their online shopping expectations – Ecommerce News | date={{date|2015-2-20}} | accessdate={{date|2016-08-29}} | deadurl=no | archiveurl=https://web.archive.org/web/20160930235730/http://ecommercenews.eu/consumers-online-shopping-expectations/ | archivedate=2016-09-30 | df= }}</ref>

<ref name="NIST National Security">{{cite web |url=http://csrc.nist.gov/groups/ST/toolkit/documents/aes/CNSS15FS.pdf |title=National Policy on the Use of the Advanced Encryption Standard (AES) to Protect National Security Systems and National Security Information |author=Lynn Hathaway |date=June 2003 |access-date=15 February 2011 |url-status=live |archive-url=https://web.archive.org/web/20101106122007/http://csrc.nist.gov/groups/ST/toolkit/documents/aes/CNSS15FS.pdf |archive-date=2010-11-06 }}</ref>

<ref name="Oxford">{{cite web|url=https://www.cs.ox.ac.uk/teaching/materials17-18/ca/lecture03.pdf|title=x86-64 Instruction Set|publisher=[[University of Oxford]]|pages=1|date={{date|2017-04-18}}|access-date={{date|2018-01-24}}}}</ref>

<ref name="NISTIBM National4758 Securitydatasheet">{{cite web |url=httpftp://csrcwww6.software.nistibm.govcom/groupssoftware/STcryptocards/toolkit/documents/aes/CNSS15FSG221-9091-04.pdf |title=NationalIBM Policy4758 onModels the Use of the Advanced Encryption Standard (AES) to Protect National Security Systems2 and National23 SecurityPCI Information |author=Lynn HathawayCryptographic Coprocessor|date={{date|June 2003}} |format=PDFMay 2004|access-date={{date|2011-02-15}}24 |deadurl=noJanuary 2018|archiveurlarchive-url=https://web.archive.org/web/2010110612200720170705054058/httpftp://csrcwww6.nistsoftware.govibm.com/groupssoftware/STcryptocards/toolkit/documents/aes/CNSS15FSG221-9091-04.pdf |archivedatearchive-date=20102017-1107-06 05|dfurl-status= dead|publisher=[[IBM]]}}</ref>

<ref name="openwrt">{{cite web|url=http://wiki.openwrt.org/doc/hardware/cryptographic.hardware.accelerators|title=Cryptographic Hardware Accelerators|publisher=OpenWRT.org|date=17 May 2016|access-date=25 January 2018|url-status=live|archive-url=https://web.archive.org/web/20180121000023/http://wiki.openwrt.org/doc/hardware/cryptographic.hardware.accelerators|archive-date=2018-01-21}}</ref>

<ref name="IBM 4758 datasheet">{{cite web|url=ftp://www6.software.ibm.com/software/cryptocards/G221-9091-04.pdf|title=IBM 4758 Models 2 and 23 PCI Cryptographic Coprocessor|date={{date|May 2004}}|access-date={{date|2018-01-24}}|publisher=[[IBM]]}}</ref>

<ref name="openwrtNIST approval">{{cite web|url=httphttps://wikicsrc.openwrtnist.orggov/doccsrc/hardwaremedia/projects/cryptographic-module-validation-program/documents/security-policies/140sp1505.hardware.acceleratorspdf|date=10 December 2012|access-date=20 January 2018|title=IBM 4765 Cryptographic HardwareCoprocessor AcceleratorsSecurity Module|publisher=OpenWRT.org[[National Institute of Standards and Technology]]|date={{date|2016url-05-17}}|access-datestatus={{datelive|2018archive-01-25}}|deadurl=no|archiveurlurl=https://web.archive.org/web/2018012100002320180125015153/httphttps://wikicsrc.openwrtnist.orggov/doccsrc/hardwaremedia/projects/cryptographic-module-validation-program/documents/security-policies/140sp1505.hardware.acceleratorspdf|archivedatearchive-date=2018-01-21|df=25}}</ref>

<ref name="NISTArecibo approvalBulldozer">{{cite web|url=https://csrcwww.nistnaic.govedu/csrc~phil/mediasoftware/projectsamd/cryptographicNew-moduleBulldozer-validationand-program/documents/securityPiledriver-policies/140sp1505Instructions-1.pdf|date={{date|October 2012-12-10}}|access-date={{date|25 January 2018-01-20}}|title=IBMNew 4765"Bulldozer" Cryptographicand Coprocessor"Piledriver" Security ModuleInstructions|publisher=[[NationalArecibo InstituteObservatory]]|author=Brent ofHollingsworth Standards([[Advanced andMicro TechnologyDevices|AMD]])|deadurlurl-status=nolive|archiveurlarchive-url=https://web.archive.org/web/2018012501515320180209120423/https://csrcwww.nistnaic.govedu/csrc~phil/mediasoftware/projectsamd/cryptographicNew-moduleBulldozer-validationand-program/documents/securityPiledriver-policies/140sp1505Instructions-1.pdf|archivedatearchive-date=2018-0102-25|df=09}}</ref>

<ref name="Arecibo BulldozerHaifa">{{cite web|url=https://wwweprint.naiciacr.eduorg/~phil2016/software/amd/New-Bulldozer-and-Piledriver-Instructions-1122.pdf|datetitle={{dateSimpira v2: A Family of Efficient Permutations Using the AES Round Function|Octoberdate=9 2012}}November 2016|access-date={{date|2018-01-25}} January 2018|titleauthor=NewShay “Bulldozer”Gueron and([[University “Piledriver”of Haifa]] & Instructions|publisher=[[Arecibo ObservatoryIntel]]|author=Brent) Hollingsworthand Nicky Mouha ([[AdvancedKU MicroLeuven]] Devices|AMD& [[NIST]])|deadurlurl-status=nolive|archiveurlarchive-url=https://web.archive.org/web/2018020912042320170716025858/https://wwweprint.naiciacr.edu/~phil/softwareorg/amd2016/New-Bulldozer-and-Piledriver-Instructions-1122.pdf|archivedatearchive-date=20182017-0207-09|df=16}}</ref>

<ref name="HaifaIntel SGX">{{cite web |url=https://eprintsoftware.iacrintel.orgcom/2016en-us/122.pdfblogs/2013/09/26/protecting-application-secrets-with-intel-sgx |title=SimpiraIntel v2:SGX Afor FamilyDummies of(Intel EfficientSGX PermutationsDesign UsingObjectives) the|work=intel.com AES Round Function|date={{date|2016-112013-09}}|access-date={{date26 |2018url-01-25}}|authorstatus=Shay Gueron ([[University of Haifa]] & [[Intel]]) andlive Nicky Mouha ([[KU Leuven]] & [[NIST]])|deadurl=no|archiveurlarchive-url=https://web.archive.org/web/2017071602585820140429161139/https://eprintsoftware.iacrintel.orgcom/2016en-us/122.pdf|archivedate=2017blogs/2013/09/26/protecting-07application-16secrets-with-intel-sgx |dfarchive-date=2014-04-29 }}</ref>

<ref name="Intel SGXBearSSL">{{citeCite web |url=https://softwarewww.intelbearssl.comorg/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx constanttime.html|title=IntelBearSSL SGX– for Dummies (Intel SGX Design Objectives)Constant-Time Crypto|workwebsite=intelwww.com bearssl.org|access-date=20132017-0901-26 10|deadurlurl-status=no live|archiveurlarchive-url=https://web.archive.org/web/2014042916113920170111003347/https://softwarewww.intelbearssl.comorg/enconstanttime.html|archive-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx |archivedatedate=20142017-0401-29 |df= 11}}</ref>

<ref name="PCW-20180109">{{cite web |author-last=Hachman |author-first=Mark |title=Microsoft tests show Spectre patches drag down performance on older PCs |url=https://www.pcworld.com/article/3245742/components-processors/microsoft-tests-show-spectre-patches-drag-down-performance-on-older-pcs.html |date=January 9, 2018 |work=[[PC World]] |access-date=2018-01-09 |deadurlurl-status=nolive |archiveurlarchive-url=https://web.archive.org/web/20180209120423/https://www.pcworld.com/article/3245742/components-processors/microsoft-tests-show-spectre-patches-drag-down-performance-on-older-pcs.html |archivedatearchive-date=February 9, 2018 |df= }}</ref>

<ref name="BearSSL">{{Cite web|url=https://www.bearssl.org/constanttime.html|title=BearSSL – Constant-Time Crypto|website=www.bearssl.org|access-date=2017-01-10|deadurl=no|archiveurl=https://web.archive.org/web/20170111003347/https://www.bearssl.org/constanttime.html|archivedate=2017-01-11|df=}}</ref>

<ref name="PCW-20180109">{{cite web |author-last=Hachman |author-first=Mark |title=Microsoft tests show Spectre patches drag down performance on older PCs |url=https://www.pcworld.com/article/3245742/components-processors/microsoft-tests-show-spectre-patches-drag-down-performance-on-older-pcs.html |date=January 9, 2018 |work=[[PC World]] |access-date=2018-01-09 |deadurl=no |archiveurl=https://web.archive.org/web/20180209120423/https://www.pcworld.com/article/3245742/components-processors/microsoft-tests-show-spectre-patches-drag-down-performance-on-older-pcs.html |archivedate=February 9, 2018 |df= }}</ref>

}}

{{Cryptography navbox | machines}}