Measuring long wire leakage with ring oscillators in cloud FPGAs
Recent investigations into FPGA routing resources have shown that long wires in FPGAs leak information about their state in a way which can be measured using ring oscillators. Although in many cases this leakage does not pose a security threat, the possibility of multi-tenant use of FPGA resources i...
| Main Authors: | , , |
|---|---|
| Format: | Conference item |
| Published: |
IEEE
2019
|
| _version_ | 1826268217808519168 |
|---|---|
| author | Giechaskiel, I Rasmussen, K Szefer, J |
| author_facet | Giechaskiel, I Rasmussen, K Szefer, J |
| author_sort | Giechaskiel, I |
| collection | OXFORD |
| description | Recent investigations into FPGA routing resources have shown that long wires in FPGAs leak information about their state in a way which can be measured using ring oscillators. Although in many cases this leakage does not pose a security threat, the possibility of multi-tenant use of FPGA resources invites potential side-and covert-channel attacks exploiting long wire leakage. However, prior work has ignored the realities of cloud environments, which may pose restrictions on the generated bitstreams, such as disallowing combinatorial loops. In this paper, we first demonstrate that the long wire leakage phenomenon persists even in the high-end Virtex UltraScale+ FPGA family. We then evaluate two ring oscillator designs that overcome combinatorial loop restrictions employed by cloud FPGA providers. We experimentally measure the long wire leakage of Virtex UltraScale+ FPGAs in the lab as well as in the Amazon and Huawei FPGA clouds. We show that the two new ring oscillator designs provide almost-identical estimates for the strength of the leakage as traditional ring oscillators, allowing us to measure femtosecond-scale changes in the delays of the long wires. We finally present a set of defense mechanisms that can prevent the new ring oscillator designs from being instantiated in the cloud and the long wire leakage from being exploited. |
| first_indexed | 2024-03-06T21:06:17Z |
| format | Conference item |
| id | oxford-uuid:3c94a631-8e0f-4c6a-b074-4559f028d457 |
| institution | University of Oxford |
| last_indexed | 2024-03-06T21:06:17Z |
| publishDate | 2019 |
| publisher | IEEE |
| record_format | dspace |
| spelling | oxford-uuid:3c94a631-8e0f-4c6a-b074-4559f028d4572022-03-26T14:14:31ZMeasuring long wire leakage with ring oscillators in cloud FPGAsConference itemhttp://purl.org/coar/resource_type/c_5794uuid:3c94a631-8e0f-4c6a-b074-4559f028d457Symplectic Elements at OxfordIEEE2019Giechaskiel, IRasmussen, KSzefer, JRecent investigations into FPGA routing resources have shown that long wires in FPGAs leak information about their state in a way which can be measured using ring oscillators. Although in many cases this leakage does not pose a security threat, the possibility of multi-tenant use of FPGA resources invites potential side-and covert-channel attacks exploiting long wire leakage. However, prior work has ignored the realities of cloud environments, which may pose restrictions on the generated bitstreams, such as disallowing combinatorial loops. In this paper, we first demonstrate that the long wire leakage phenomenon persists even in the high-end Virtex UltraScale+ FPGA family. We then evaluate two ring oscillator designs that overcome combinatorial loop restrictions employed by cloud FPGA providers. We experimentally measure the long wire leakage of Virtex UltraScale+ FPGAs in the lab as well as in the Amazon and Huawei FPGA clouds. We show that the two new ring oscillator designs provide almost-identical estimates for the strength of the leakage as traditional ring oscillators, allowing us to measure femtosecond-scale changes in the delays of the long wires. We finally present a set of defense mechanisms that can prevent the new ring oscillator designs from being instantiated in the cloud and the long wire leakage from being exploited. |
| spellingShingle | Giechaskiel, I Rasmussen, K Szefer, J Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title | Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title_full | Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title_fullStr | Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title_full_unstemmed | Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title_short | Measuring long wire leakage with ring oscillators in cloud FPGAs |
| title_sort | measuring long wire leakage with ring oscillators in cloud fpgas |
| work_keys_str_mv | AT giechaskieli measuringlongwireleakagewithringoscillatorsincloudfpgas AT rasmussenk measuringlongwireleakagewithringoscillatorsincloudfpgas AT szeferj measuringlongwireleakagewithringoscillatorsincloudfpgas |