R/B-SecArch: A strong isolated SoC architecture based on red/black concept for secure and efficient cryptographic services

Abstract

Cryptographic chips usually act as a secure base for information security systems and provide corresponding cryptographic services. Trusted execution environment (TEE) techniques for on-chip security have been widely proposed and effectively validated in academia and industry. However, existing mainstream TEEs still have certain security risks, especially in the face of emerging microarchitectural attacks. To address this issue, this paper proposes a strong isolation SoC architecture for high-security application requirements based on the red/black concept. Meanwhile, to provide efficient cryptographic services, we design an isolation interface that separates data and cryptographic tasks, and a cryptographic service descriptor that matches the isolation interface is defined. In addition, we designed a secure boot mechanism with OTP as the root of trust to ensure the system's power on security. Finally, we conduct performance tests and security analysis; the results show that the architecture can still provide efficient cryptographic services while ensuring security.