Cache Locking and Encryption for Embedded Systems Security

Embedded systems are designed to have security measures in place that protect users’ data from software and network attacks, but these measures can prove useless when the attacker gains physical access to the system. Different attacks can target various components of the system such as memory or power. Research has shown that dynamic random access memory (DRAM) is vulnerable to attacks that take advantage of its remanence property where data remains in DRAM shortly after the system is powered off. In this thesis, we propose a method utilizing both cache locking and encryption to secure the DRAM on any embedded system by modifying the cache architecture of the CPU. We demonstrate an implementation using a MicroBlaze soft-core CPU on an FPGA. The cache modifications introduce almost no impact on performance and minimal extra hardware utilization.