On Reading SRAMs in IR Images, and Establishing Bounds on Trust
2 days ago
- #hardware security
- #SRAM analysis
- #IR imaging
- IR imaging can detect and place an upper bound on SRAM on a chip, helping to verify that fabricated RAM matches open-RTL claims like in the Baochip-1x.
- Hidden memory, such as small RAM blocks or extra rows, can evade software checks but may be physically detectable through IR inspection, though detection depends on attack methods and process nodes.
- Understanding SRAM macro structure—like decoders, columns, and repeaters—allows for visual analysis of RAM size and configuration, aiding in security verification.
- While IR inspection rules out most attacks, advanced methods like laser interferometry or SEM may be needed to detect subtle modifications, but such attacks are costly and increasingly detectable.
- The ability to inspect silicon practically enhances security by transforming unbounded searches for hidden memory into manageable proof-of-space measurements.