Reconfigurable HSMs: Future Proofing Hardware Security
Presents an FPGA-based reconfigurable Hardware Security Module architecture capable of post-deployment updates to support evolving cryptographic standards.
Summary
Limitations of Fixed-Function HSMs
Hardware Security Modules (HSMs) provide isolated cryptographic key storage and accelerated cryptographic operations. However, traditional ASIC-based HSMs are physically immutable, requiring costly hardware replacements when cryptographic algorithms are deprecated.
FPGA-Based Reconfigurable Architecture
Pablo Trujillo introduces a reconfigurable HSM design built on Field-Programmable Gate Arrays (FPGArrays). This architecture enables secure post-deployment bitstream updates, allowing organizations to deploy new algorithms as cryptographic standards evolve.
Adapting to Post-Quantum Migrations
As organizations transition to quantum-resistant primitives, reconfigurable HSMs allow rapid implementation and performance tuning of lattice-based algorithms without redesigning physical security enclosures.
Secure Provisioning and Cryptographic Isolation
Maintaining hardware security assurance requires authenticated bitstream loading, physical anti-tamper sensing, and hardware-enforced memory isolation within the reconfigurable logic fabric.
Related talks
Wireless Village·33 min
Travis Goodspeed
Travis Goodspeed provides an update on the Goodwatch open-source wrist-worn RF radio hacking and packet manipulation platform.
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Village Interviews·9 min
The DEF CON Video Team gets the full overview of hands-on hardware labs, firmware analysis, and microelectronics at the Embedded Systems Village.