{"id":"https://openalex.org/W4281666926","doi":"https://doi.org/10.1109/fccm53951.2022.9786118","title":"A Cautionary Note on Protecting Xilinx\u2019 UltraScale(+) Bitstream Encryption and Authentication Engine","display_name":"A Cautionary Note on Protecting Xilinx\u2019 UltraScale(+) Bitstream Encryption and Authentication Engine","publication_year":2022,"publication_date":"2022-05-15","ids":{"openalex":"https://openalex.org/W4281666926","doi":"https://doi.org/10.1109/fccm53951.2022.9786118"},"language":"en","primary_location":{"id":"doi:10.1109/fccm53951.2022.9786118","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fccm53951.2022.9786118","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 30th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033295803","display_name":"Maik Ender","orcid":"https://orcid.org/0000-0002-0685-2541"},"institutions":[{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maik Ender","raw_affiliation_strings":["Max Planck Institute for Security and Privacy (MPI-SP),Bochum,Germany","Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Security and Privacy (MPI-SP),Bochum,Germany","institution_ids":["https://openalex.org/I4210096592"]},{"raw_affiliation_string":"Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany","institution_ids":["https://openalex.org/I4210096592"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078330300","display_name":"Gregor Leander","orcid":"https://orcid.org/0000-0002-2579-8587"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gregor Leander","raw_affiliation_strings":["Ruhr University Bochum,Horst Görtz Institute for IT Security,Bochum,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ruhr University Bochum,Horst Görtz Institute for IT Security,Bochum,Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012815811","display_name":"Amir Moradi","orcid":"https://orcid.org/0000-0002-4032-7433"},"institutions":[{"id":"https://openalex.org/I180923762","display_name":"University of Cologne","ror":"https://ror.org/00rcxh774","country_code":"DE","type":"education","lineage":["https://openalex.org/I180923762"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Amir Moradi","raw_affiliation_strings":["University of Cologne,Institute of Computer Science,Cologne,Germany","Institute of Computer Science, University of Cologne, Cologne, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Cologne,Institute of Computer Science,Cologne,Germany","institution_ids":["https://openalex.org/I180923762"]},{"raw_affiliation_string":"Institute of Computer Science, University of Cologne, Cologne, Germany","institution_ids":["https://openalex.org/I180923762"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041748332","display_name":"Christof Paar","orcid":"https://orcid.org/0000-0001-8681-2277"},"institutions":[{"id":"https://openalex.org/I4210096592","display_name":"Max Planck Institute for Security and Privacy","ror":"https://ror.org/00bj0r217","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210096592"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christof Paar","raw_affiliation_strings":["Max Planck Institute for Security and Privacy (MPI-SP),Bochum,Germany","Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Security and Privacy (MPI-SP),Bochum,Germany","institution_ids":["https://openalex.org/I4210096592"]},{"raw_affiliation_string":"Max Planck Institute for Security and Privacy (MPI-SP), Bochum, Germany","institution_ids":["https://openalex.org/I4210096592"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0153,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.9225997,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7542591094970703},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.6924954056739807},{"id":"https://openalex.org/keywords/bitstream","display_name":"Bitstream","score":0.6372916102409363},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5717654228210449},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5641739964485168},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5255963802337646},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.42704200744628906},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.41109031438827515},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.09010681509971619},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.07733628153800964}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7542591094970703},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.6924954056739807},{"id":"https://openalex.org/C136695289","wikidata":"https://www.wikidata.org/wiki/Q415568","display_name":"Bitstream","level":3,"score":0.6372916102409363},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5717654228210449},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5641739964485168},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5255963802337646},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.42704200744628906},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41109031438827515},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.09010681509971619},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.07733628153800964}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/fccm53951.2022.9786118","is_oa":false,"landing_page_url":"https://doi.org/10.1109/fccm53951.2022.9786118","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 30th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1995447946","https://openalex.org/W2052965490","https://openalex.org/W2127992996","https://openalex.org/W2166778460","https://openalex.org/W2171795845","https://openalex.org/W2478604032","https://openalex.org/W2564798724","https://openalex.org/W2766071343","https://openalex.org/W2949797438","https://openalex.org/W3107372570","https://openalex.org/W3170159994","https://openalex.org/W6776294083"],"related_works":["https://openalex.org/W4319430423","https://openalex.org/W4390224957","https://openalex.org/W4323831234","https://openalex.org/W2544043553","https://openalex.org/W2121309702","https://openalex.org/W49599899","https://openalex.org/W4311839959","https://openalex.org/W3217774925","https://openalex.org/W2040087757","https://openalex.org/W2009741039"],"abstract_inverted_index":{"FPGA":[0,80],"bitstream":[1,19,109],"protection":[2],"schemes":[3],"are":[4],"often":[5],"the":[6,18,26,31,35,39,94,108,149,168,175,183,190,194,237,240,248,255],"first":[7],"line":[8],"of":[9,244],"defense":[10],"for":[11],"secure":[12,205],"hardware":[13,43],"designs.":[14],"In":[15,137],"general,":[16],"breaking":[17,34],"encryption":[20,151],"would":[21],"enable":[22],"attackers":[23],"to":[24,58,97,106,201],"subvert":[25],"confidentiality":[27],"and":[28,101,152,156,188,204,247],"infringe":[29],"on":[30,74,148],"IP.":[32],"Or":[33],"authenticity":[36],"enables":[37],"manipulating":[38],"design,":[40],"e.g.,":[41],"inserting":[42],"Trojans.":[44],"Since":[45],"FPGAs":[46,131],"see":[47],"widespread":[48],"use":[49],"in":[50,128,143,269],"our":[51,210,220],"interconnected":[52],"world,":[53],"such":[54],"attacks":[55,121,142,147],"can":[56,199],"lead":[57,200],"severe":[59],"damages,":[60],"including":[61],"physical":[62],"harm.":[63],"Recently":[64],"we":[65,139,165,192],"[1]":[66],"presented":[67],"a":[68,84,102,162],"surprising":[69],"attack":[70,170,181],"\u2014":[71,73],"Starbleed":[72,169],"Xilinx":[75,91,129,213],"7-Series":[76],"FPGAs,":[77],"tricking":[78],"an":[79,180],"into":[81],"acting":[82],"as":[83],"decryption":[85],"oracle.":[86],"For":[87],"their":[88],"UltraScale(+)":[89,113,130,176],"series,":[90],"independently":[92],"upgraded":[93],"security":[95,126,202,260,266],"features":[96],"AES-GCM,":[98],"RSA":[99],"signatures,":[100],"periodic":[103],"GHASH-based":[104,154,184],"checksum":[105,155],"validate":[107],"during":[110],"decryption.":[111],"Hence,":[112],"devices":[114],"were":[115],"considered":[116],"not":[117,207,217,230],"affected":[118,208,218],"by":[119,178,209,219],"Starbleed-like":[120],"[2],":[122],"[1].We":[123],"identified":[124],"novel":[125,153],"weaknesses":[127,267],"if":[132],"configured":[133],"outside":[134,236],"recommended":[135],"settings.":[136],"particular,":[138],"present":[140],"four":[141],"this":[144,270],"situation:":[145],"two":[146,157],"AES":[150],"authentication":[158],"downgrade":[159],"attacks.":[160,211],"As":[161,212],"major":[163],"contribution,":[164],"show":[166],"that":[167,232,250,264],"is":[171,229,253],"still":[172],"possible":[173],"within":[174],"series":[177],"developing":[179],"against":[182],"checksum.":[185],"After":[186],"describing":[187],"analyzing":[189],"attacks,":[191,221],"list":[193],"subtle":[195],"configuration":[196,245],"changes":[197],"which":[198],"vulnerabilities":[203],"configurations":[206,216],"only":[214],"recommends":[215],"users":[222,233],"should":[223],"be":[224],"largely":[225],"secure.":[226],"However,":[227],"it":[228],"unlikely":[231],"employ":[234],"settings":[235],"recommendations,":[238],"given":[239],"rather":[241],"large":[242],"number":[243],"options":[246],"fact":[249],"Security":[251],"Misconfiguration":[252],"among":[254],"leading":[256],"top":[257],"10":[258],"OWASP":[259],"issues.":[261],"We":[262],"note":[263],"these":[265],"shown":[268],"paper":[271],"had":[272],"been":[273],"unknown":[274],"before.":[275]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}