Importance and Challenges of Security Evaluations of Hardware-Based Security (S12c)
Security and security evaluations of integrated circuits are a very important component for the overall security of devices and systems. Security evaluation and certification of integrated circuits and hardware-based security is complex for a number of reasons. First, there are a large number of different regulations and assurance requirements that are continuously being developed. Second, the security of hardware-based solutions depends on the specific solution, and the solutions are fragmented, ranging from highly secure to unprotected in different technologies. Third, attacks and tools for attacks in the hardware area are actively being developed, leading to the implementation of countermeasures and increased complexity and costs. Fourth, the developments of cryptography to quantum-safe algorithms introduce challenges larger than drop-in replacements. This talk begins with an introduction to hardware-based security evaluation and its importance for the overall security of devices and systems. It then describes the current challenges for manufacturers, security laboratories, and certification assessment bodies, focusing on developments in the landscape of regulations and certification schemes as well as challenges for hardware-based security in light of post-quantum cryptography.