Post-Quantum and Blockchain-Based Attestation for Trusted FPGAs in B5G Networks

TL;DR

This paper presents a hybrid security framework for FPGAs in B5G networks, combining post-quantum cryptography, remote attestation, and blockchain to enhance security with minimal performance overhead.

Contribution

It introduces a novel integrated approach using post-quantum cryptography and blockchain for secure FPGA attestation in edge networks, addressing quantum threats and trust issues.

Findings

Only 2% overhead with PQC algorithms compared to non-PQC methods

Effective remote attestation for FPGA security in quantum-threat scenarios

Blockchain ensures secure storage of security evidence

Abstract

The advent of 5G and beyond has brought increased performance networks, facilitating the deployment of services closer to the user. To meet performance requirements such services require specialized hardware, such as Field Programmable Gate Arrays (FPGAs). However, FPGAs are often deployed in unprotected environments, leaving the user's applications vulnerable to multiple attacks. With the rise of quantum computing, which threatens the integrity of widely-used cryptographic algorithms, the need for a robust security infrastructure is even more crucial. In this paper we introduce a hybrid hardware-software solution utilizing remote attestation to securely configure FPGAs, while integrating Post-Quantum Cryptographic (PQC) algorithms for enhanced security. Additionally, to enable trustworthiness across the whole edge computing continuum, our solution integrates a blockchain infrastructure, ensuring the secure storage of any security evidence. We evaluate the proposed secure configuration process under different PQC algorithms in two FPGA families, showcasing only 2% overheard compared to the non PQC approach.