Hardware Root of Trust

The core of an HRoT is a Physical Unclonable Function, a physical structure that derives a unique, repeatable identifier from deep sub-micron manufacturing variations in silicon. Unlike a key stored in memory, a PUF's secret is not digitally stored but is implicitly embedded in the physical material.

• SRAM PUF: Exploits the random power-up state of SRAM cells.
• Arbiter PUF: Measures race conditions in identically laid-out signal paths.
• Ring Oscillator PUF: Compares the random frequency variations of identical oscillators. This ensures the root identity is never present in a powered-off state, making it immune to physical memory extraction attacks.

An HRoT must be physically shielded to protect the PUF and its associated processing logic. The enclosure provides an active defense-in-depth layer.

• Tamper-Evident: Physical seals or meshes that show irreversible signs of intrusion, allowing for visual inspection and warranty voiding.
• Tamper-Responsive: Active sensors that detect drilling, voltage manipulation, or temperature extremes and immediately trigger a zeroization of all derived cryptographic keys and sensitive state. This guarantees that any physical attack on the device leaves a trace or renders the security material useless.

The HRoT does not just store a static identity; it is a secure cryptographic engine. It uses the PUF's unique output as a root seed to deterministically regenerate a primary key pair on demand.

• Key Derivation: The PUF response is fed into a hardened key derivation function (KDF) to produce a stable, high-entropy cryptographic key.
• Volatile Key Storage: Derived keys are held only in secure, volatile memory within the HRoT boundary and are never exposed to the main operating system or external interfaces.
• Hardware-Backed Keystore: Provides a secure enclave for managing a hierarchy of application keys, all ultimately sealed by the PUF-derived root.

An HRoT provides a physically isolated computing domain, separate from the main application processor, to execute security-critical code. This hardware-enforced isolation ensures that even a fully compromised rich OS cannot tamper with security functions.

• Dedicated CPU Core: A small, hardened processor core runs only authenticated firmware.
• Private Memory: Protected SRAM and ROM are inaccessible from the outside.
• Atomic Operations: Critical operations like secure boot verification and key release are performed as uninterruptible, isolated routines. This creates a trusted execution environment (TEE) that is impervious to software-based attacks on the primary system.

The HRoT can generate a signed, verifiable report about the device's identity and the integrity of its software stack. This process, known as attestation, proves to a remote server that the device is genuine and in a known-good state.

• Local Attestation: Proves its integrity to other secure components within the same device.
• Remote Attestation: Generates a digitally signed quote, chained to the PUF-based root key, that a remote challenger can verify.
• Measured Boot: Each stage of the boot process is cryptographically measured and recorded in Platform Configuration Registers (PCRs) before execution, creating an immutable chain of trust.

Extending the concept of a silicon PUF, an RF-PUF leverages the unique, microscopic manufacturing variances in a transmitter's analog components (DACs, mixers, power amplifiers) as the root of trust. These impairments create an unclonable, radiometric signature.

• Passive Identification: The device's identity is verified by analyzing its over-the-air signal without any active cryptographic exchange.
• Zero-Footprint Authentication: The root of trust is inherent in the physical signal itself, adding no extra bits or protocol overhead.
• Supply Chain Integrity: The RF fingerprint can be enrolled at the factory, providing a seamless method to authenticate a device throughout its entire lifecycle, from manufacturing to decommissioning.

A physical hardware security primitive that exploits inherent manufacturing variations in silicon to generate a unique, unclonable identity. Unlike storing a key in non-volatile memory, a PUF derives a secret from the unpredictable physical properties of the chip itself.

• Silicon PUF: Uses variations in transistor threshold voltages
• SRAM PUF: Leverages the random power-up state of SRAM cells
• RF PUF: The specific application of this concept to the analog impairments of a radio transmitter

The PUF response is generated only when needed, making it resistant to physical probing and invasive attacks.

The process of uniquely identifying a wireless transmitter by analyzing the subtle, hardware-specific imperfections in its emitted radio frequency signal. SEI treats these unintentional modulations as a device biometric.

• Distinguishes between identical make-and-model transmitters
• Analyzes transient (turn-on) and steady-state signal features
• Originally developed for military signals intelligence and threat identification
• Now applied to civilian IoT security and supply chain authentication

SEI is the operational outcome enabled by a hardware root of trust based on RF properties.

A conceptual term for the unique, intrinsic, and unclonable radio frequency fingerprint derived from a device's hardware impairments. Analogous to biological DNA, this signature is:

• Inherent: Present from the moment of manufacture
• Immutable: Cannot be altered without physically modifying the hardware
• Unique: Statistically distinct even among devices from the same production batch
• Unclonable: Cannot be replicated by a digital or physical copy

RF-DNA serves as the root identity anchor from which all subsequent trust relationships in a wireless network can be derived.

The process of providing a verifiable proof of a device's hardware integrity and identity based on its physical layer characteristics. This is the active mechanism that leverages a hardware root of trust.

• Remote Attestation: A verifier challenges a device to prove its identity
• Continuous Attestation: Identity is re-verified throughout a session, not just at login
• Zero-Trust Integration: Provides the physical layer anchor for zero-trust architectures

Attestation transforms the passive fingerprint into an actionable security protocol that can gate network access and resource authorization.

A method of verifying device identity that relies on intrinsic physical characteristics rather than mathematical keys or protocols. This approach eliminates several attack vectors:

• No Key Storage: No secret to extract from memory
• No Key Exchange: No handshake to intercept or manipulate
• No Algorithmic Vulnerability: Not susceptible to mathematical cryptanalysis
• Passive Operation: The verifier only needs to observe normal transmissions

This paradigm is particularly valuable for resource-constrained IoT devices that lack the compute power for robust cryptographic operations.

The specific capability of an RF fingerprinting system to distinguish a genuine device from a physical or digital copy attempting to impersonate it. A hardware root of trust makes this possible because:

• Physical Unclonability: The analog impairments cannot be precisely replicated
• Statistical Distance: Genuine and cloned signatures exhibit measurable divergence
• Machine Learning Classifiers: Neural networks are trained to detect subtle anomalies indicative of a clone

Clone detection is the critical security outcome that protects networks from device impersonation and replay attacks.