• No results found

Security in Emerging Technologies based Computing Systems

Conclusion and Future Directions

7.2 Future Directions

7.2.4 Security in Emerging Technologies based Computing Systems

With CMOS technology scaling down to deep nanometer realm, process variation has become more and more pronounced. The increasing process variations lead to consider-able uncertainty in circuit performance and large spread in chip speed. The imprecision provided by the deeply downscaled nanometer CMOS technology no longer holds on the widely accepted practice of designing circuits that operate on deterministic zeros and ones. One interesting direction is to exploit the inherent randomness for cryptographic purposes. A broad objective is to embed security and cryptographic primitives into customized circuits with negligible overhead by making use of the inherent randomness.

For example, in the sub-threshold or near-threshold applications, soft errors can be di-rectly used as PUF response and/or random numbers. The advantage is manifest in the fact that this approach does not incur any overhead, since these soft errors are cre-ated by voltage over-scaling for the low-power purpose that will be corrected by certain compensation algorithm at a later stage.

At meanwhile, as the semiconductor industry contemplates the end of Moore’s Law, there has been a groundswell of interest in technologies that offer a path to scale beyond the limits of the current CMOS technology. Emerging technologies that might help ex-tend the life of Moore’s Law, such as carbon nanotubes [123], nanowire arrays [124], and molecular FETs [125], present both challenges and opportunities for digital cir-cuit design. Most of these technologies are characterized by very high defect rates, as well as large amounts of inherent randomness. For example, it is nearly impossible to guarantee perfect alignment and accurate positioning of all carbon nanotubes at VLSI scale. Mispositioned and misaligned carbon nanotubes can result in incorrect digital logic functionality. Hardware security of emerging technologies can be a very important research topic in the future. For example, future non-volatile memory systems, such

as phase change memory (PCM), spin torque transfer magnetoresistive RAM (STT-MRAM), and resistive RAM (RRAM), typically have large number of intrinsic defects.

A non-volatile storage system includes solutions to mask intrinsic defects, read and era-sure endurance and cell coupling problems. When used appropriately, such information allows unique identification of non-volatile memory. Different technologies might to be considered within an overall framework for security applications. Future work can be directed towards developing a general method to inherently extract randomness on non-volatile memory systems for security signature or random number applications.

References

[1] J. Villasenor and M. Tehranipoor. Chop-shop electronics. IEEE Spectrum, 50(10):41–45, 2013.

[2] R. Pappu, B. Recht, J. Taylor, and N. Gershenfeld. Physical one-way functions.

Science, 297(5589):2026–2030, 2002.

[3] B. Gassend, D. Clarke, M. Van Dijk, and S. Devadas. Silicon physical random functions. In Proceedings of the 9th ACM Conference on Computer and Commu-nications Security, 2002.

[4] B. Gassend, D. Clarke, M. Van Dijk, and S. Devadas. Controlled physical un-clonable functions. In Proceedings of 18th Annual Computer Security Application Conference, pages 149–160, 2002.

[5] S. Kumar, J. Guajardo, R. Maesyz, G. Schrijen, and P. Tuyls. Extended abstract:

The butterfly PUF protecting IP on every FPGA. In Proceedings of Hardware-Oriented Security and Trust (HOST 2008), pages 67–70, 2008.

[6] R. Maes, P. Tuyls, and I. Verbauwhede. Intrinsic PUFs from flip-flops on reconfig-urable devices. In Proceedings of 3rd Benelux Workshop Information and System Security (WISSec 08), pages 63–80, 2008.

168

[7] D. E. Holcomb, W. P. Burleson, and K. Fu. Initial SRAM state as a fingerprint and source of true random numbers. In Proceedings of Conference on RFID Security, 2007.

[8] U. Ruhrmair, F. Sehnke, J. Solter, G. Dror, S. Devadas, and J. Schmidhuber.

Modeling attacks on physical unclonable functions. In Proceedings of Conference on RFID Security, pages 237–249, 2010.

[9] M. Majzoobi, F. Koushanfar, and M. Potkonjak. Techniques for design and imple-mentation of secure reconfigurable PUFs. ACM Transactions on Reconfigurable Technology and Systems, 2(1):1–33, 2009.

[10] D. Lim, J. W. Lee, B. Gassend, G. E. Suh, M. Van Dijk, and S. Devadas. Extract-ing secret keys from integrated circuits. IEEE Transaction on Very Large Scale Integration Systems, 13(10):1200–1205, 2005.

[11] H. Chang and S. Sapatnekar. Statistical timing analysis considering spatial cor-relation in a pert-like traversal. In Proceedings of IEEE International Conference Computer-Aided Design Integrated Circuits and Systems, pages 621–625, 2003.

[12] J.-W. Lee, D. Lim, B. Gassend, G. E. Suh, M. van Dijk, and S. Devadas. A tech-nique to build a secret key in integrated circuits with identification and authenti-cation appliauthenti-cations. In Proceedings of IEEE International Conference Computer-Aided Design Integrated Circuits and Systems, pages 621–625, 2003.

[13] K. Kursawe, AR. Sadeghi, D. Schellekens B. Skoric, and P. Tuyls. Reconfigurable physical unclonable functions – enabling technology for tamper-resistant storage.

In Proceedings of 2nd IEEE International Workshop on Hardware-Oriented Secu-rity and Trust(HOST), pages 22–29, 2009.

[14] S. Morozov, A. Maiti, and P. Schaumont. An analysis of delay based PUF imple-mentations on FPGA. In Proceedings of 6th International Symposium on Applied

170 Reconfigurable Computing. LNCS, pages 382–387. Springer Berlin / Heidelber, 2010.

[15] D. Merli, F. Stumpf, and C. Eckert. Improving the quality of ring oscillator PUFs on FPGAs. In Proceedings of the 5th Workshop on Embedded Systems Security, pages 9:1–9:9, 2010.

[16] J. Guajardo, S. S. Kumar, G.-J. Schrijen, and P. Tuyls. FPGA intrinsic PUFs and their use for IP protection. In Proceedings of Cryptographic Hardware and Embedded Systems (CHES 2007), pages 10–13, 2007.

[17] J. Cong. Challenges and opportunities for design innovations in nanometer tech-nologies. SRC Design Science Concept Paper, 1997.

[18] S. Nassif. Delay variability: Sources, impact and trends. In Solid-State Circuits Conference, pages 368–369, 2000.

[19] L. Alaus, D. Noguet, and J. Palicot. A reconfigurable linear feedback shift register operator for software defined radio terminal. In IEEE International Symposium on Wireless Pervasive Computing, 2008.

[20] P. Kitsos, N. Sklavos, N. Zervas, and O. Koufopavlou. A reconfigurable linear feedback shift register (LFSR) for the bluetooth system. In Proceedings of IEEE International Conference on Electronics, Circuits and Systems (ICECS), pages 991–994, 2001.

[21] M. Zeghida, B. Bouallegue, A. Baganne, and M. Machhout. A reconfigurable implementation of the new secure hash algorithm. In Proceedings of Second In-ternational Conference on Availability, Reliability and Security (ARES), pages 281–285, 2007.

[22] B. Gassend, D. Clarke, M. Van Dijk, and S. Devadas. Silicon physical random functions. In Proceedings of ACM Conference on Computer and Communications Security, pages 148–160, 2002.

[23] B. ˇSkori´c, S. Maubach, T. Kevenaar, and P. Tuyls. Information-theoretic anal-ysis of capacitive physical unclonable functions. Journal of Applied physics, 100(2):024902–024902, 2006.

[24] B. ˇSkori´c. On the entropy of keys derived from laser speckle; statistical properties of gabor-transformed speckle. Journal of Optics A: Pure and Applied Optics, 10(5):055304, 2008.

[25] A. Maiti, J. Casarona, L. McHale, and P. Schaumont. A large scale characteriza-tion of RO-PUF. In Proceedings of IEEE Internacharacteriza-tional Symposium on Hardware-Oriented Security and Trust (HOST), pages 94–99, 2010.

[26] R. Maes, P. Tuyls, and I. Verbauwhede. Statistical analysis of silicon PUF re-sponses for device identification. In Proceedings of SECSI Workshop, volume 2008, 2008.

[27] Z. Jouini, J. Danger, and L. Bossuet. Performance evaluation of physically un-clonable function by delay statistics. In Proceedings of IEEE 9th International New Circuits and Systems Conference (NEWCAS), pages 482–485, 2011.

[28] Z. Tariguliyev and B. Ors. Reliability and security of arbiter-based physical un-clonable function circuits. International Journal of Communication Systems, 2012.

[29] Y. Hori, T. Yoshida, T. Katashita, and A. Satoh. Quantitative and statistical performance evaluation of arbiter physical unclonable functions on FPGAs. In Proceedings of International Conference on Reconfigurable Computing and FPGAs (ReConFig), pages 298–303, 2010.

172 [30] I. Kim, A. Maiti, L. Nazhandali, P. Schaumont, V. Vivekraja, and H. Zhang.

From statistics to circuits: Foundations for future physical unclonable functions.

Towards Hardware-Intrinsic Security, pages 55–78, 2010.

[31] Y. Lao and K. K. Parhi. Novel reconfigurable silicon physical unclonable functions.

In Proceedings of Workshop on Foundations of Dependable and Secure Cyber-Physical Systems (FDSCPS), pages 30–36, 2011.

[32] Y. Lao and K. K. Parhi. Reconfigurable architectures for silicon physical unclon-able functions. In Proceedings of IEEE Int. Conference on Electro Information Technology, 2011.

[33] Y. A. Prudnikov, A. P. Brychkov, and O. L. Marichev. Integrals and series, vol.

2: Special functions. Gordon and Breach Science Publ., 1990.

[34] H. Chang and S. Sapatnekar. Statistical timing analysis under spatial correlations.

IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 24(9):1467–1482, 2005.

[35] B. Skoric, G. J. Schrijen, W. Ophey, R. Wolters, N. Verhaegh, and J. van Geloven.

Experimental hardware for coating PUFs and optical PUFs. Springer-Verlag, page ch. 15, 2007.

[36] S. S. Kumar, J. Guajardo, R. Maes, G.-J. Schrijen, and P. Tuyls. The butterfly PUF protecting IP on every FPGA. In Proceedings of the IEEE International Workshop on Hardware-Oriented Security and Trust, pages 67–70, 2008.

[37] K. Rosenfeld, E. Gavas, and R. Karri. Sensor physical unclonable functions. In Proceeding of the IEEE International Symposium on Hardware-Oriented Security and Trust, pages 112–117, 2010.

[38] G. E. Suh and S. Devadas. Physical unclonable functions for device authentication and secret key generation. In Proceedings of the 44th annual Design Automation Conference, pages 9–14, 2007.

[39] G. E. Suh, C. W. O’Donnell, I. Sachdev, and S. Devadas. Design and implemen-tation of the AEGIS single-chip secure processor using physical random functions.

ACM SIGARCH Computer Architecture News, 33(2):25–36, 2005.

[40] Y. Dodis, L. Reyzin, and A. Smith. Fuzzy extractors: How to generate strong keys from biometrics and other noisy data. In Proceedings of International Conference of Theory and Applications of Cryptographic Techniques, pages 523–540, 2004.

[41] C. B¨osch, J. Guajardo, A.-R. Sadeghi, J. Shokrollahi, and P. Tuyls. Efficient helper data key extractor on FPGAs. In Proceedings of the Cryptographic Hardware and Embedded Systems–CHES 2008, pages 181–197, 2008.

[42] Y. M. Alkabani and F. Koushanfar. Active hardware metering for intellectual property protection and security. In Proceedings of the USENIX Security Sympo-sium, pages 1–16, 2007.

[43] Y. Alkabani, F. Koushanfar, and M. Potkonjak. Remote activation of ICs for piracy prevention and digital right management. In Proceedings of International Conference on Computer-Aided Design (DAC), pages 674–677, 2007.

[44] J. Zhang, Y. Lin, Y. Lyu, G. Qu, R. C. Cheung, W. Che, Q. Zhou, and J. Bian. FP-GA IP protection by binding finite state machine to physical unclonable function.

In 23rd International Conference on Field Programmable Logic and Applications (FPL), pages 1–4, 2013.

[45] R. S. Chakraborty and S. Bhunia. HARPOON: an obfuscation-based SoC design methodology for hardware protection. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 28(10):1493–1502, 2009.

174 [46] Y. Lao and K. K. Parhi. Protecting DSP circuits through obfuscation. In Pro-ceedings of the IEEE International Symposium on Circuits and Systems (ISCAS), pages 798–801, 2014.

[47] Y. Alkabani and F. Koushanfar. N-variant IC design: methodology and applica-tions. In Proceedings of the 45th annual Design Automation Conference, pages 546–551, 2008.

[48] R. E. Blahut. Theory and practice of error control codes. Addison-Wesley, 1983.

[49] A. Juels and M. Wattenberg. A fuzzy commitment scheme. In Proceedings of the 6th ACM conference on Computer and communications security, pages 28–36, 1999.

[50] P. Tuyls and B. Skoric. Strong authentication with PUFs. Security, Privacy and Trust in Modern Data Management, 2007.

[51] M. Majzoobi, M. Rostami, F. Koushanfar, D. S. Wallach, and S. Devadas. Slen-der PUF protocol: A lightweight, robust, and secure authentication by substring matching. In IEEE Symposium on Security and Privacy Workshops (SPW), pages 33–44, 2012.

[52] Z. Paral and S. Devadas. Reliable and efficient PUF-based key generation us-ing pattern matchus-ing. In IEEE International Symposium on Hardware-Oriented Security and Trust (HOST), pages 128–133, 2011.

[53] M. Majzoobi, F. Koushanfar, and S. Devadas. FPGA PUF using programmable delay lines. In IEEE International Workshop on Information Forensics and Se-curity (WIFS), pages 1–6, 2010.

[54] S. Devadas and M. Yu. Secure and robust error correction for physical unclonable functions. IEEE Design and Test of Computers, 27(1):48–65, 2010.

[55] M. D. Dailey. Authentication Schemes based on Physically Unclonable Functions.

PhD thesis, Worcester Polytechnic Institute, 2009.

[56] K. B. Frikken, M. Blanton, and M. J. Atallah. Robust authentication using phys-ically unclonable functions. In Proceedings of Information Security Conference (ISC), 2009.

[57] Y.-M. Lin, H.-C. Chang, and C.-Y. Lee. Improved high corate soft BCH de-coder architectures with one extra error compensation. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 21(11):2160–2164, 2013.

[58] A. Oliveira. Techniques for the creation of digital watermarks in sequential circuit designs. IEEE Transactions on CAD of Integrated Circuits and Systems, pages 1101–1117, 2001.

[59] D. Kirovski, Y.-Y. Hwang, M. Potkonjak, and J. Cong. Intellectual property protection by watermarking combinational logic synthesis solutions. In Proceedings of International Conference on Computer Aided Design (ICCAD), pages 194–198, 1998.

[60] A. Kahng, J. Lach, W. Mangione-Smith, S. Mantik, I. Markov, M. Potkonjak, P. Tucker, H. Wang, and G. Wolfe. Watermarking techniques for intellectual property protection. In Proceedings of Design Automation Conference (DAC), pages 776–781, 1998.

[61] F. Koushanfar and Y. Alkabani. Provably secure obfuscation of diverse watermark-s for watermark-sequential circuitwatermark-s. In Proceedingwatermark-s of International Sympowatermark-sium on Hardware-Oriented Security and Trust (HOST), pages 42–47, 2010.

[62] J. A. Roy, F. Koushanfar, and I. L. Markov. EPIC: Ending piracy of integrated circuits. In Proceedings of Design, Automation and Test in Europe (DATE), 2008.

176 [63] W. Griffin, A. Raghunathan, and K. Roy. CLIP: Circuit level IC protection through direct injection of process variations. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 20(5):791–803, 2012.

[64] T. Batra. Methodology for protection and licensing of HDL IP. [Online].

http://www.design-reuse.com/articles/12745, 2005.

[65] R. S. Chakraborty and S. Bhunia. Hardware protection and authentication through netlist level obfuscation. In Proceedings of International Conference on Computer Aided Design ICCAD, pages 674–677, 2008.

[66] R. S. Chakraborty and S. Bhunia. RTL hardware IP protection using key-based control and data flow obfuscation. In Proceedings of 23rd International Conference on VLSI design, pages 405–410, 2010.

[67] K. K. Parhi. Algorithm transformation techniques for concurrent processors. Pro-ceedings of the IEEE, 77(12):1879–1895, December 1989.

[68] K. K. Parhi and D. G. Messerschmitt. Pipeline interleaving and parallelism in recursive digital filters, part I: Pipelining using scattered look-ahead and decom-position. IEEE Transactions on VLSI systems, 37(7):1099–1117, 1989.

[69] K. K. Parhi, C.-Y. Wang, and A. P. Brown. Synthesis of control circuits in folded pipelined DSP architectures. IEEE Journal of Solid State Circuits, 27(1):29–43, 1992.

[70] K. K. Parhi and D. G. Messerschmitt. Static rate-optimal scheduling of iterative data flow programs via optimum unfolding. IEEE Transactions on Computers, 40(2):178–195, 1991.

[71] K. K. Parhi. Pipelining in algorithms with quantizer loops. IEEE Transactions on Circuits and Systems, 38(7):745–754, July 1991.

[72] K. K. Parhi. Low-energy CSMT carry generators and binary adders. IEEE Trans-actions on Very Large Scale Integration (VLSI) Systems, 7(4):450–462, December 1999.

[73] K. K. Parhi. Design of multigigabit multiplexer-loop-based decision feedback e-qualizers. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 13(4):489–493, April 2005.

[74] N. R. Shanbhag and K. K. Parhi. Relaxed look-ahead pipelined LMS adaptive filters and their application to ADPCM coder. IEEE Transactions on Circuits and Systems-II: Analog and Digital Signal Processing, 40(12):753–766, December 1993.

[75] J. Ma, K. K. Parhi, and E. F. Deprettere. Annihilation-reordering look-ahead pipelined CORDIC-based RLS adaptive filters and their application to adaptive beamforming. IEEE Transactions on Signal Processing, 48(8):2414–2431, August 2000.

[76] C.-Y. Wang and K. K. Parhi. High-level DSP synthesis using concurrent trans-formations, scheduling, and allocation. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems, 14(3):274–295, 1995.

[77] K. K. Parhi. VLSI Digital Signal Processing Systems: Design and Implementation.

John Wiley and Sons, 1999.

[78] K. K. Parhi. Hierarchical folding and synthesis of iterative data flow graphs. IEEE Trans. Circuits and Systems-II: Transactions Briefs, 60(9):597–601, 2013.

[79] K. K. Parhi. Verifying equivalence of digital signal processing circuits. In Pro-ceedings of Conference on Signals, Systems and Computers (ASILOMAR), pages 99–103, 2012.

178 [80] K. K. Parhi. A systematic approach for design of digit-serial signal processing architectures. IEEE Transactions on Circuits and Systems, 38(4):358–375, 1991.

[81] R. Brederlow, R. Prakash, C. Paulus, and R. Thewes. A low-power true random number generator using random telegraph noise of single oxide-traps. In IEEE International on Solid-State Circuits Conference, pages 1666–1675, 2006.

[82] D. E. Holcomb, W. P. Burleson, and K. Fu. Initial SRAM state as a fingerprint and source of true random numbers for RFID tags. In Proceedings of the Conference on RFID Security, volume 7, 2007.

[83] C. Tokunaga, D. Blaauw, and T. Mudge. True random number generator with a metastability-based quality control. IEEE Journal of Solid-State Circuits, 43(1):78–85, 2008.

[84] M. Majzoobi, F. Koushanfar, and S. Devadas. FPGA-based true random number generation using circuit metastability with adaptive feedback control. In Crypto-graphic Hardware and Embedded Systems (CHES), pages 17–32. 2011.

[85] S. Srinivasan, S. Mathew, R. Ramanarayanan, F. Sheikh, M. Anders, H. Kaul, V. Erraguntla, R. Krishnamurthy, and G. Taylor. 2.4 GHz 7mW all-digital PVT-variation tolerant true random number generator in 45nm CMOS. In Proceedings of IEEE Symposium on VLSI Circuits (VLSIC), pages 203–204, 2010.

[86] K. Yang, D. Fick, M. B. Henry, Y. Lee, D. Blaauw, and D. Sylvester. A 23M-b/s 23pJ/b fully synthesized true-random-number generator in 28nm and 65nm CMOS. In Proceedings of IEEE International Solid-State Circuits Conference Digest of Technical Papers, pages 280–281, 2014.

[87] M. T. Rahman, K. Xiao, D. Forte, X. Zhang, J. Shi, and M. Tehranipoor. TI-TRNG: Technology independent true random number generator. In Proceedings

of the The 51st Annual Design Automation Conference on Design Automation Conference, pages 1–6, 2014.

[88] C. S. Petrie and J. A. Connelly. A noise-based random bit generator IC for applications in cryptography. In Proceedings of the IEEE International Symposium on Circuits and Systems (ISCAS), volume 2, pages 197–200, 1998.

[89] C. S. Petrie and J. A. Connelly. A noise-based IC random number generator for applications in cryptography. IEEE Transactions on Circuits and Systems I:

Fundamental Theory and Applications, 47(5):615–621, 2000.

[90] M. Epstein, L. Hars, R. Krasinski, M. Rosner, and H. Zheng. Design and imple-mentation of a true random number generator based on digital circuit artifacts.

In Cryptographic Hardware and Embedded Systems (CHES), pages 152–165. 2003.

[91] H. Bock, M. Bucci, and R. Luzzi. An offset-compensated oscillator-based random bit source for security applications. In Cryptographic Hardware and Embedded Systems (CHES), pages 268–281. 2004.

[92] P. Kohlbrenner and K. Gaj. An embedded true random number generator for FPGAs. In Proceedings of the 2004 ACM/SIGDA 12th international symposium on Field Programmable Gate Arrays, pages 71–78, 2004.

[93] B. Sunar, W. J. Martin, and D. R. Stinson. A provably secure true random number generator with built-in tolerance to active attacks. IEEE Transactions on Computers, 56(1):109–119, 2007.

[94] K. Wold and C. H. Tan. Analysis and enhancement of random number genera-tor in FPGA based on oscillagenera-tor rings. International Journal of Reconfigurable Computing, 2009:4, 2009.

[95] B. Valtchanov, V. Fischer, A. Aubert, and F. Bernard. TRNG based on the coherent sampling. In CryptArchi, 2009.

180 [96] M. Bucci, L. Germani, R. Luzzi, A. Trifiletti, and M. Varanonuovo. A high-speed oscillator-based truly random number source for cryptographic applications on a smart card IC. IEEE Transactions on Computers, 52(4):403–409, 2003.

[97] A. Rukhin, J. Soto, J. Nechvatal, M. Smid, and E. Barker. A statistical test suite for random and pseudorandom number generators for cryptographic applications.

Technical report, DTIC Document, 2001.

[98] G. Marsaglia. DIEHARD: a battery of tests of randomness. See http://stat. fsu.

edu/ geo/diehard. html, 1996.

[99] W. Killmann and W. Schindler. AIS 31: Functionality Classes and Evaluation Methodology for True (Physical) Random Number Generators, Version 3.1. Bun-desamt fur Sicherheit in der Informationstechnik (BSI), 2001.

[100] Q. Tang, B. Kim, Y. Lao, K. K. Parhi, and C. H. Kim. True random number generator circuits based on single- and multi-phase beat frequency detection. In Proceedings of IEEE Customs Integrated Circuits Conference, 2014.

[101] J. Liberty, A. Barrera, D. W. Boerstler, T. B. Chadwick, S. R. Cottier, H. P.

Hofstee, J. A. Rosser, and M. L. Tsai. True hardware random number generation implemented in the 32-nm SOI POWER7+ processor. IBM Journal of Research and Development, 57(6):4–1, 2013.

[102] T.-H. Kim, R. Persaud, and C. H. Kim. Silicon odometer: An on-chip reliability monitor for measuring frequency degradation of digital circuits. IEEE Journal of Solid-State Circuits, 43(4):874–880, 2008.

[103] J. Von Neumann. Various techniques used in connection with random digits.

Applied Math Series, 12(36-38):1, 1951.

[104] C. S. Petrie and J. A. Connelly. Modeling and simulation of oscillator-based random number generators. In Proceedings of IEEE International Symposium on Circuits and Systems, volume 4, pages 324–327, 1996.

[105] W. Schindler. A stochastical model and its analysis for a physical random number generator presented at CHES 2002. In Cryptography and Coding, pages 276–289.

2003.

[106] B. J. Abcunas. Evaluation of random number generators on FPGAs. PhD thesis, Worcester Polytechnic Institue, 2004.

[107] W. R. Coppock. A mathematical and physical analysis of circuit jitter with appli-cation to cryptographic random bit generation. PhD thesis, Worcester Polytechnic Institue, 2005.

[108] A. A. Abidi. Phase noise and jitter in cmos ring oscillators. IEEE Journal of Solid-State Circuits, 41(8):1803–1816, 2006.

[109] M. Baudet, D. Lubicz, J.n Micolod, and A. Tassiaux. On the security of oscillator-based random number generators. Journal of cryptology, 24(2):398–425, 2011.

[110] K. Wold. Security properties of a class of true random number generators in programmable logic. PhD thesis, Gjovik University College, 2011.

[111] Q. Tang, X. Wang, J. Keane, and C. H. Kim. RTN induced frequency shift mea-surements using a ring oscillator based circuit. In Symposium on VLSI Technology, pages T188–T189, 2013.

[112] A. Stuart and J. K. Ord. Kendalls advanced theory of statistics. Vol. I. distribution theory. Arnold, London, 1994.

[113] M. Dichtl. Bad and good ways of post-processing biased physical random numbers.

In Proceedings of Fast Software Encryption, pages 137–152, 2007.