Hardware-based encryption

Hardware-based encryption

The IBM 4758 Cryptographic Module
Process type	Cryptography
Industrial sector(s)	Computing
Main technologies or sub-processes	Cryptographic hash function, Encryption

Hardware-based encryption is the use of computer hardware to assist software, or sometimes replace software, in the process of data encryption. Typically, this is implemented as part of the processor's instruction set. For example, the AES encryption algorithm (a modern cipher) can be implemented using the AES instruction set on the ubiquitous x86 architecture.^[1] Such instructions also exist on the ARM architecture.^[2] However, more unusual systems exist where the cryptography module is separate from the central processor, instead being implemented as a coprocessor, in particular a secure cryptoprocessor or cryptographic accelerator, of which an example is the IBM 4758, or its successor, the IBM 4764.^[3] Hardware implementations can be faster and less prone to exploitation than traditional software implementations, and furthermore can be protected against tampering.^[4]

Prior to the use of computer hardware, cryptography could be performed through various mechanical or electro-mechanical means. An early example is the Scytale used by the Spartans.^[5] The Enigma machine was an electro-mechanical system cipher machine notably used by the Germans in World War II.^{[citation needed]} After World War II, purely electronic systems were developed. In 1987 the ABYSS (A Basic Yorktown Security System) project was initiated.^[6][7] The aim of this project was to protect against software piracy. However, the application of computers to cryptography in general dates back to the 1940s and Bletchley Park, where the Colossus computer was used to break the encryption used by German High Command during World War II. The use of computers to encrypt, however, came later. In particular, until the development of the integrated circuit, of which the first was produced in 1960, computers were impractical for encryption, since, in comparison to the portable form factor of the Enigma machine,^[8] computers of the era took the space of an entire building. It was only with the development of the microcomputer that computer encryption became feasible, outside of niche applications. The development of the World Wide Web lead to the need for consumers to have access to encryption, as online shopping became prevalent.^[9] The key concerns for consumers were security and speed.^[9] This led to the eventual inclusion of the key algorithms into processors as a way of both increasing speed and security.^[4]

The X86 architecture, as a CISC (Complex Instruction Set Computer) Architecture, typically implements complex algorithms in hardware.^[10] Cryptographic algorithms are no exception. The x86 architecture implements significant components of the AES (Advanced Encryption Standard) algorithm,^[1] which can be used by the NSA for Top Secret information.^[11] The architecture also includes support for the SHA Hashing Algorithms through the Intel SHA extensions.^[1] Whereas AES is a cipher, which is useful for encrypting documents, hashing is used for verification, such as of passwords (see PBKDF2).

ARM processors can optionally support Security Extensions. Although ARM is a RISC (Reduced Instruction Set Computer) architecture, there are several optional extensions specified by ARM Holdings.^[2][12]

• IBM 4758 – The predecessor to the IBM 4764.^[13] This includes its own specialised processor, memory and a Random Number Generator.^[14]
• IBM 4764 and IBM 4765, identical except for the connection used.^[13] The former uses PCI-X, while the latter uses PCI-e.^[3] Both are peripheral devices that plug into the motherboard.

Advanced Micro Devices (AMD) processors are also x86 devices, and have supported the AES instructions since the 2011 Bulldozer processor iteration.^[15] Due to the existence of encryption instructions on modern processors provided by both Intel and AMD, the instructions are present on most modern computers.^[16] They also exist on many tablets and smartphones due to their implementation in ARM processors.^[16]

Implementing cryptography in hardware means that part of the processor is dedicated to the task. This can lead to a large increase in speed.^[4] In particular, modern processor architectures that support pipelining can often perform other instructions concurrently with the execution of the encryption instruction. Furthermore, hardware can have methods of protecting data from software. Consequently, even if the operating system is compromised, the data may still be secure (see Software Guard Extensions).^[17]

If, however, the hardware implementation is compromised, major issues arise. Malicious software can retrieve the data from the (supposedly) secure hardware – a large class of method used is the timing attack.^[18] This is far more problematic to solve than a software bug, even within the operating system. Microsoft regularly deals with security issues through Windows Update. Similarly, regular security updates are released for Mac OS X and Linux, as well as mobile operating systems like iOS, Android, and Windows Phone. However, hardware is a different issue. Sometimes, the issue will be fixable through updates to the processor's microcode (a low level type of software). However, other issues may only be resolvable through replacing the hardware, or a workaround in the operating system which mitigates the performance benefit of the hardware implementation, such as in the Spectre exploit.^[19]

• Disk encryption hardware
• Hardware-based full disk encryption
• Hardware security module