SRAM PUF

[peterz]

Hi

I just stumbled about SRAM PUF which could solve me a huge problem in IoT provisioning certificates.

https://www.intrinsic-id.com/products/spartan/ sounds very promising. But I see there are patents involved.

Does Nordic have any plans to provide this technology?

As I understand this technology it could be very easily applied to nRF5 products and it would give us extremely well protected certificates in a very cost effective way.

best regards

Peter Zankl

[ovrebekk]

Hi Peter

Being in IoT we have a strong focus on security, and the subject of secure key storage is one that pops up regularly. 

I don't think we have looked into this particular technology, but I can forward it to the designers to make sure they are aware of it. 

If the technology is SRAM based, how does it handle key storage when you don't have power?

Best regards
Torbjørn

[peterz]

> If the technology is SRAM based, how does it handle key storage when you don't have power?

the trick is: it doesn't! When the SRAM is powered up, fluctuations within the chip cause the individual RAM cells to fall in a preferred state. The pattern is unique because you can't control production down to this level. And when the power is off, you can't detect any stored information from the outside!

As the nRF52832 gives me the possibility to switch off a block of 4K SRAM and to switch it on whenever I need to retrieve this unique fingerprint of the chip I get a lot of unique, reproduceable  information almost for free.

[ovrebekk]

Hi Peter

Thanks for the explanation. I wasn't aware of this interesting property of SRAM, but I forwarded it to our security experts, and they were familiar with it. 

I believe the main problem with this technology is that it is quite expensive to use, since there is a license associated with it. There is nothing stopping you or anyone else from licensing this technology and using it with our device, but then you would have to pay their license. 

We don't have any plans to make this technology an integrated part of our product. 

For future roadmaps you should talk to our sales people (send me a PM if you need to know who your sales representative is). 

Best regards
Torbjørn