SHCoT: Secure (and Verified) Hybrid Chain of Trust to Protect from Malicious Software in LightWeight Devices Looking at the speed by which the software and the hardware evolve separately, there is no surprise that the interactions of the two may result in issues and appearance of backdoors to bypass the existing security. Lately, the hardwaresoftware codesign gained lots of interest in both academia and industry, and proposed multiple hybrid solutions to enhance softwarehardware interactions, security, and safety while guaranteeing good performance. In this paper, we focus on isolation and attestation to enforce the chain of trust in lightweight devices and detect malicious data and software locally and remotely. We present SHCoT, a hardwaresoftware codesign to renew trust in devices. SHCoT is our first attempt to develop a formally verified hybrid solution to enhance existing solutions in the literature. While the work is still in progress, the first results show a partial verification of the security properties of SHCoT and small hardwaresoftware cost.

Secure Internal Communication of a TrustzoneEnabled Heterogeneous Soc Lightweight Encryption Security in TrustZoneenabled heterogeneous systemonchip (SoC) is gaining increasing attention for several years. Mainly because this type of SoC can be found in more and more applications in servers or in the cloud. The insideSoC communication layer is one of the main element of heterogeneous SoC; indeed all the data goes through it. Monitoring and controlling insideSoC communications enables to fend off attacks before system corruption. In this article, we study the feasibility of encrypted data exchange between the secure software executed in a trusted execution environment (TEE) and the secure logic part of an heterogeneous SoC. Experiment are done with a Xilinx Zynq7010 SoC and two lightweight stream ciphers. We show that using lightweight stream ciphers is an efficient solution without excessive overheads.