{"id":"https://openalex.org/W3187343772","doi":"https://doi.org/10.1109/tc.2022.3152666","title":"An Exhaustive Approach to Detecting Transient Execution Side Channels in RTL Designs of Processors","display_name":"An Exhaustive Approach to Detecting Transient Execution Side Channels in RTL Designs of Processors","publication_year":2022,"publication_date":"2022-02-18","ids":{"openalex":"https://openalex.org/W3187343772","doi":"https://doi.org/10.1109/tc.2022.3152666","mag":"3187343772"},"language":"en","primary_location":{"id":"doi:10.1109/tc.2022.3152666","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3152666","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2108.01979","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056116323","display_name":"Mohammad Rahmani Fadiheh","orcid":"https://orcid.org/0000-0003-0214-2486"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mohammad Rahmani Fadiheh","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0214-2486","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054093712","display_name":"Alex Wezel","orcid":"https://orcid.org/0000-0002-3462-0094"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alex Wezel","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany"],"raw_orcid":"https://orcid.org/0000-0002-3462-0094","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107699930","display_name":"Johannes M\u00fcller","orcid":"https://orcid.org/0000-0001-6480-6159"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Johannes Muller","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109857353","display_name":"J\u00f6rg Bormann","orcid":null},"institutions":[{"id":"https://openalex.org/I1325886976","display_name":"Siemens (Germany)","ror":"https://ror.org/059mq0909","country_code":"DE","type":"company","lineage":["https://openalex.org/I1325886976"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jorg Bormann","raw_affiliation_strings":["Siemens EDA, München, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Siemens EDA, München, Germany","institution_ids":["https://openalex.org/I1325886976"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044595322","display_name":"Sayak Ray","orcid":"https://orcid.org/0000-0003-3944-6715"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sayak Ray","raw_affiliation_strings":["Intel Product Assurance and Security, Intel Corporation, Portland, OR, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Product Assurance and Security, Intel Corporation, Portland, OR, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066800978","display_name":"Jason M. Fung","orcid":"https://orcid.org/0000-0001-9754-8715"},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason M. Fung","raw_affiliation_strings":["Intel Product Assurance and Security, Intel Corporation, Portland, OR, USA"],"raw_orcid":"https://orcid.org/0000-0001-9754-8715","affiliations":[{"raw_affiliation_string":"Intel Product Assurance and Security, Intel Corporation, Portland, OR, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036312663","display_name":"Subhasish Mitra","orcid":"https://orcid.org/0000-0002-5572-5194"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Subhasish Mitra","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Department of Computer Science, Stanford University, Stanford, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-5572-5194","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Department of Computer Science, Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047920654","display_name":"Dominik Stoffel","orcid":"https://orcid.org/0000-0002-8180-9738"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Dominik Stoffel","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany"],"raw_orcid":"https://orcid.org/0000-0002-8180-9738","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066184879","display_name":"Wolfgang Kunz","orcid":"https://orcid.org/0000-0002-6612-2946"},"institutions":[{"id":"https://openalex.org/I153267046","display_name":"University of Kaiserslautern","ror":"https://ror.org/04zrf7b53","country_code":"DE","type":"education","lineage":["https://openalex.org/I153267046"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Wolfgang Kunz","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany"],"raw_orcid":"https://orcid.org/0000-0002-6612-2946","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Technische Universität Kaiserslautern, Kaiserslautern, Germany","institution_ids":["https://openalex.org/I153267046"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1372,"has_fulltext":false,"cited_by_count":32,"citation_normalized_percentile":{"value":0.92330172,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"72","issue":"1","first_page":"222","last_page":"235"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9869999885559082,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9781000018119812,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.790098249912262},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6812711358070374},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.49231040477752686},{"id":"https://openalex.org/keywords/transient","display_name":"Transient (computer programming)","score":0.4897341728210449},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.4794687032699585},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.37784305214881897},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.31328147649765015},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.28160950541496277},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2514878809452057},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.23955845832824707}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.790098249912262},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6812711358070374},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.49231040477752686},{"id":"https://openalex.org/C2780799671","wikidata":"https://www.wikidata.org/wiki/Q17087362","display_name":"Transient (computer programming)","level":2,"score":0.4897341728210449},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.4794687032699585},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.37784305214881897},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.31328147649765015},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.28160950541496277},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2514878809452057},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.23955845832824707}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tc.2022.3152666","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tc.2022.3152666","pdf_url":null,"source":{"id":"https://openalex.org/S157670870","display_name":"IEEE Transactions on Computers","issn_l":"0018-9340","issn":["0018-9340","0016-9340","1557-9956","2326-3814"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computers","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2108.01979","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2108.01979","pdf_url":"https://arxiv.org/pdf/2108.01979","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2108.01979","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2108.01979","pdf_url":"https://arxiv.org/pdf/2108.01979","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W1495266209","https://openalex.org/W1787074469","https://openalex.org/W1965953351","https://openalex.org/W2024977521","https://openalex.org/W2057318675","https://openalex.org/W2133996557","https://openalex.org/W2137035823","https://openalex.org/W2147657366","https://openalex.org/W2157116240","https://openalex.org/W2165097265","https://openalex.org/W2610653992","https://openalex.org/W2781723315","https://openalex.org/W2798765367","https://openalex.org/W2810649391","https://openalex.org/W2868863044","https://openalex.org/W2903725623","https://openalex.org/W2904129921","https://openalex.org/W2904222803","https://openalex.org/W2938066316","https://openalex.org/W2963311060","https://openalex.org/W2963739369","https://openalex.org/W2966573167","https://openalex.org/W2971539790","https://openalex.org/W2979780468","https://openalex.org/W2982848142","https://openalex.org/W2989878597","https://openalex.org/W3008607731","https://openalex.org/W3021139463","https://openalex.org/W3033726579","https://openalex.org/W3035979525","https://openalex.org/W3044184923","https://openalex.org/W3045655459","https://openalex.org/W3086071207","https://openalex.org/W3092493782","https://openalex.org/W3096867085","https://openalex.org/W3097783227","https://openalex.org/W3113111557","https://openalex.org/W3114864185","https://openalex.org/W3115684912","https://openalex.org/W3146887843","https://openalex.org/W3153387123","https://openalex.org/W3153564332","https://openalex.org/W3159715284","https://openalex.org/W3171088241","https://openalex.org/W3191114843","https://openalex.org/W3212393472","https://openalex.org/W4231170123","https://openalex.org/W4231359931","https://openalex.org/W4231640108","https://openalex.org/W4232120412","https://openalex.org/W4243399171","https://openalex.org/W4245276998","https://openalex.org/W4250728693","https://openalex.org/W4289105799","https://openalex.org/W4297813588","https://openalex.org/W6656580007","https://openalex.org/W6747544890","https://openalex.org/W6753251892","https://openalex.org/W6756645753","https://openalex.org/W6757305456","https://openalex.org/W6769215722","https://openalex.org/W6778035576","https://openalex.org/W6779145970","https://openalex.org/W6781293767","https://openalex.org/W6782804933","https://openalex.org/W6987020231","https://openalex.org/W6999016131"],"related_works":["https://openalex.org/W4214838992","https://openalex.org/W2034886984","https://openalex.org/W3136337477","https://openalex.org/W3012114143","https://openalex.org/W2537115708","https://openalex.org/W4236137312","https://openalex.org/W2162464118","https://openalex.org/W2004692581","https://openalex.org/W4239886135","https://openalex.org/W4238383621"],"abstract_inverted_index":{"Hardware":[0],"(HW)":[1],"security":[2,30,48,80,98],"issues":[3],"have":[4],"been":[5],"emerging":[6],"at":[7,83],"an":[8],"alarming":[9],"rate":[10],"in":[11,22,61,134,172,223],"recent":[12,36],"years.":[13],"Transient":[14],"execution":[15,103,132,201,220],"attacks,":[16,104],"such":[17],"as":[18,106],"Spectre":[19],"and":[20,53,148,195],"Meltdown,":[21],"particular,":[23],"pose":[24],"a":[25,50,56,70,94,107,112,142,180],"genuine":[26],"threat":[27],"to":[28,73,101,125,130,179],"the":[29,39,62,67,79,84,204,211],"of":[31,42,58,81,97,161,183,206,225],"modern":[32],"computing":[33],"systems.":[34],"Despite":[35],"advances,":[37],"understanding":[38],"intricate":[40],"implications":[41],"microarchitectural":[43],"design":[44],"decisions":[45],"on":[46,145,155],"processor":[47],"remains":[49],"great":[51],"challenge":[52],"has":[54],"caused":[55],"number":[57],"update":[59],"cycles":[60],"past.":[63],"This":[64,163],"papers":[65],"addresses":[66],"need":[68],"for":[69],"new":[71,168],"approach":[72],"HW":[74,108,184],"sign-off":[75],"verification":[76,214],"which":[77],"guarantees":[78],"processors":[82,188,196,224],"Register":[85],"Transfer":[86],"Level":[87],"(RTL).":[88],"To":[89,203],"this":[90],"end,":[91],"we":[92],"introduce":[93],"formal":[95,113],"definition":[96],"with":[99,175,191,197],"respect":[100],"transient":[102,131,219],"formulated":[105],"property.":[109],"We":[110],"present":[111],"proof":[114],"methodology":[115],"based":[116,154],"onUnique":[117],"Program":[118],"Execution":[119],"Checking":[120],"(UPEC)which":[121],"can":[122,149],"be":[123],"used":[124],"systematically":[126],"detect":[127,151],"all":[128],"vulnerabilities":[129,153],"attacks":[133,147],"RTL":[135,213],"designs.":[136],"UPEC":[137,177,209],"does":[138],"not":[139],"exploit":[140],"any":[141],"priori":[143],"knowledge":[144],"known":[146],"therefore":[150],"also":[152],"new,":[156],"so":[157],"far":[158],"unknown,":[159],"types":[160],"channels.":[162],"is":[164,210],"demonstrated":[165],"by":[166],"two":[167],"attack":[169],"scenarios":[170],"discovered":[171],"our":[173,207],"experiments":[174],"UPEC.":[176],"scales":[178],"wide":[181],"range":[182],"designs,":[185],"including":[186],"in-order":[187],"(RocketChip),":[189],"pipelines":[190],"out-of-order":[192,199],"writeback":[193],"(Ariane),":[194],"deep":[198],"speculative":[200],"(BOOM).":[202],"best":[205],"knowledge,":[208],"first":[212],"technique":[215],"that":[216],"exhaustively":[217],"covers":[218],"side":[221],"channels":[222],"realistic":[226],"complexity.":[227]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":12}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2021-08-16T00:00:00"}