POST-DOC - Enhancing the Security of RISC-V Microarchitectures Against Laser Fault Injection


Designing secure embedded systems is a critical challenge due to their inherently complex three-layer architecture: hardware, microarchitecture, and software. Cyber threats often exploit vulnerabilities introduced during the design phase, which remain undetected due to a lack of design tools that integrate a realistic attacker model with a holistic approach. Current tools and methods lack a deep understanding of the global system, particularly the interactions between its layers and with its environment (including attacker actions).

Recent works aim at building realistic fault models. Previous work provided efficient CAD tools to help circuit designers evaluate countermeasures against laser attacks early in the design process. A high-level RTL model of laser-induced faults was developed to emulate such attacks. More complex and realistic fault models have been proposed since, used to evaluate secure cryptographic implementations, and have been validated with respect to circuit layouts, quantifying its accuracy in predicting localized faults. The availability of realistic and complete fault models allows designers to propose efficient and effective countermeasures at a reasonable cost.

The objective of this PostDoc is to extend this work by leveraging RTL fault models existing in the state of the art and proposed by the TwinSec project, to assess and improve the security of RISC-V microarchitectures (e.g., OpenTitan, CV32, CVA6) and their recent countermeasures (e.g., Mafia, AKHACIA). The aim is to improve existing countermeasures or develop new ones at design level that incorporate both hardware and software protections for embedded code, such as, for example, secure boot mechanisms.

This PostDoc will take place in TIMA Laboratory, Grenoble and will last 12 to 24 months, depending on candidate profile and time of start. The candidate will strictly cooperate with other partners involved in the project, both local (CEA, LCIS, Verimag) and national. 

📌 Descriptif du poste

Voir tous les postes