Fuse attestation to secure the provisioning of secret keys during integrated circuit manufacturing

摘要

Embodiments of an invention for fuse attestation to secure the provisioning of secret keys during integrated circuit manufacturing are disclosed. In one embodiment, an apparatus includes a storage location, a physically unclonable function (PUF) circuit, a PUF key generator, an encryption unit, and a plurality of fuses. The storage location is to store a configuration fuse value. The PUF circuit is to provide a PUF value. The PUF key generator is to generate a PUF key based on the PUF value. The encryption unit is to encrypt the configuration fuse value using the PUF key. The PUF key and the configuration fuse value are to be provided to a key server. The key server is to determine that the configuration fuse value indicates that the apparatus is a production component, and, in response, provide a fuse key to be stored in the plurality of fuses.

主权项

1. An apparatus comprising:
a first storage location to store a configuration fuse value; a physically unclonable function (PUF) circuit to provide a PUF value; a PUF key generator to generate a PUF key based on the PUF value, where the PUF key is to be provided to a key server; an encryption unit to encrypt the configuration fuse value using the PUF key, wherein the encrypted configuration fuse value is to be provided to the key server; and a plurality of fuses in which to store a fuse key provided by the key server in response to the key server determining that the configuration fuse value indicates that the apparatus is a production component.