Patching FPGAs: The Security Implications of Bitstream Modifications

TL;DR

This paper presents a framework for manipulating FPGA bitstreams with minimal reverse engineering, exposing security vulnerabilities and emphasizing the need for stronger protections against malicious modifications.

Contribution

It introduces a novel semi-automated method for precise bitstream modifications without full reverse engineering, highlighting security risks in FPGA reprogrammability.

Findings

Framework successfully modifies bitstreams in case studies

Current protections like encryption are insufficient against such manipulations

Highlights the need for improved FPGA security measures

Abstract

Field Programmable Gate Arrays (FPGAs) are known for their reprogrammability that allows for post-manufacture circuitry changes. Nowadays, they are integral to a variety of systems including high-security applications such as aerospace and military systems. However, this reprogrammability also introduces significant security challenges, as bitstream manipulation can directly alter hardware circuits. Malicious manipulations may lead to leakage of secret data and the implementation of hardware Trojans. In this paper, we present a comprehensive framework for manipulating bitstreams with minimal reverse engineering, thereby exposing the potential risks associated with inadequate bitstream protection. Our methodology does not require a complete understanding of proprietary bitstream formats or a fully reverse-engineered target design. Instead, it enables precise modifications by inserting pre-synthesized circuits into existing bitstreams. This novel approach is demonstrated through a semi-automated framework consisting of five steps: (1) partial bitstream reverse engineering, (2) designing the modification, (3) placing and (4) routing the modification into the existing circuit, and (5) merging of the modification with the original bitstream. We validate our framework through four practical case studies on the OpenTitan design synthesized for Xilinx 7-Series FPGAs. While current protections such as bitstream authentication and encryption often fall short, our work highlights and discusses the urgency of developing effective countermeasures. We recommend using FPGAs as trust anchors only when bitstream manipulation attacks can be reliably excluded.