Secure Aggregate Encryption with Identity-Based Authentication for Multi-Vendor FPGA Cloud Deployment
Researchers present SAEID, a pairing-based framework that authenticates FPGA devices and protects multi-vendor cloud bitstreams.
The paper introduces SAEID, which combines aggregate authorization, certificate-free identity-based device authentication, and identity-bound bitstream verification for heterogeneous FPGA clouds. It extends AgEID so multiple vendors and IP providers can use capability-aware authorization and dynamic membership, with AES-256-GCM protecting bitstreams. Identity-based authentication takes about 4.35 ms, membership updates take 4.95–5.09 microseconds, and full software decryption on a ZC702 Cortex-A9 takes 191.126 ms. Revoked devices cannot access future deployments, and newly enrolled devices cannot decrypt prior ones.
- SAEID unifies aggregate authorization, device authentication, and bitstream verification.
- It supports multiple FPGA vendors, IP providers, and dynamic membership.
- Identity-based authentication completes in about 4.35 milliseconds.
- Full decryption on a ZC702 Cortex-A9 takes 191.126 milliseconds.
- Aggregate ciphertexts stay constant size inside each vendor domain.
From the original article
1 min read at arxiv.orgSecure deployment of FPGA bitstreams in heterogeneous multi-vendor cloud infrastructures requires scalable authorization, authenticated device access, and bitstream protection throughout the deployment lifecycle. Existing approaches typically address these functions through separate mechanisms, increasing coordination and key management requirements.
By Mukta Debnath · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.