Instruction Set Architecture for Pervasive Security

用于普遍安全的指令集架构

• 批准号: 0105677
• 负责人: Ruby Lee
• 金额: $ 25.66万
• 依托单位: Princeton University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-09-01 至 2004-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0105677&HistoricalAwards=false
• 关键词: Instruction; Set; Architecture; Pervasive; Security

This research investigates core architectural features for secure and private communications and computations over the public Internet and wireless infrastructures. It focuses on what instruction-set architecture (ISA) features general-purpose processors would have, if secure information processing is the default pervasive mode of operation, with non-secure processing the optional mode, rather than vice versa. It proposes ISA features for very fast, flexible, software cryptographic processing, not only for current algorithms but also to enable algorithm designers to create new cryptographic algorithms that are more secure and more efficient. Word-oriented, programmable processors can be radically more effective for cryptographic functions with new instructions for sub-word manipulations, as well as for multi-word arithmetic. Novel bit permutation instructions are proposed for providing superior diffusion capabilities for current and future symmetric key algorithms. Their performance, area and latency tradeoffs, and scalability with superscalar organizations are studied. Very fast table lookup and other ISA features are also studied for algorithms like Rijndael, the recent Advanced Encryption Standard winner, and for public-key algorithms like Elliptic Curve Cryptography. The research also investigates architectural features for secure key management, and other ISA features designed to enhance or enforce system security.

这项研究调查了公共互联网和无线基础设施上安全和私密通信和计算的核心架构特征。 它重点关注如果安全信息处理是默认的普遍操作模式，而非安全处理是可选模式，那么通用处理器将具有哪些指令集架构 (ISA) 功能，而不是反之亦然。 它提出了非常快速、灵活的软件加密处理的 ISA 功能，不仅适用于当前算法，而且使算法设计者能够创建更安全、更高效的新加密算法。 面向字的可编程处理器可以通过用于子字操作以及多字算术的新指令来更加有效地实现加密功能。 提出了新颖的位排列指令来为当前和未来的对称密钥算法提供卓越的扩散能力。 研究了它们的性能、面积和延迟权衡，以及超标量组织的可扩展性。 还针对 Rijndael（最近的高级加密标准获胜者）等算法以及椭圆曲线加密等公钥算法研究了非常快速的表查找和其他 ISA 功能。 该研究还调查了安全密钥管理的体系结构功能，以及旨在增强或加强系统安全性的其他 ISA 功能。