Tradeoffs in Key Rotation Strategies for Industrial Internet of Things Devices and Firmware
Source abstract
Abstract
This paper provides an overview of several secure boot architectures with a focus on key rotation. It expands on a practitioner note that the authors submitted to the 2023 IEEE Secure Development Conference. Key rotation is important due to the frequency of lost signing keys and the difficulty of managing secret keys for the long lifetimes of Industrial Internet of Things (IIOT) devices. Key rotation is not simple for IIOT due to limited resources during a secure boot process and the constraints of the firmware utilities that come from the chip vendors. This paper reviews and compares five common architectures for a secure boot that are seen across the IIOT community. For each architecture, it provides some key strengths and weaknesses associated with that architecture. The paper then provides a detailed comparison and analysis of the architectures to convince the IIOT community to move towards a strong use of certificates (instead of the traditional use of raw public keys). The intent of this paper is to provide a practitioner’s perspective on these challenges and the tradeoffs in hopes of inviting comments from chip vendors and the broader community.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: IoT and Edge/Fog Computing · Blockchain Technology Applications and Security · Digital Transformation in Industry
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Enterprise Product Architecture, Cumming, GA 30040, USA
Product Security, Richmond, VA 23233, USA
Cyber Security, Sandy Springs, GA 30328, USA
References (27)
Show source-provided references
1. Sen, S., and Song, L. (2021, January 22–23). An IIOT-based networked industrial control system architecture to secure industrial application. Proceedings of the 2021 IEEE Industrial Electronics and Applications Conference (IEACon), Penang, Malaysia.10.1109/IEACon51066.2021.9654520 ↗
2. Abosata, N., Al-Rubaye, S., Inalhan, G., and Emmanouilidis, C. (2021). Internet of things for system integrity: A comprehensive survey on security, attacks and countermeasures for industrial applications. Sensors, 21.10.3390/s21113654 ↗
3. Joshi, S., Crowther, K., and Robinson, J. (2023, January 18–20). Adaptive security: Certificate and key rotation for firmware integrity. Proceedings of the 2023 IEEE Secure Development Conference (SecDev), Atlanta, GA, USA.10.1109/SecDev56634.2023.00035 ↗
4. A Survey of Security Challenges in Internet of Things10.25046/aj030133 ↗
5. Lynn, T., Mooney, J., Lee, B., and Endo, P. (2020). The Internet of Things: Definitions, Key Concepts, and Reference Architectures. The Cloud-to-Thing Continuum: Opportunities and Challenges in Cloud, Fog, and Edge Computing, Springer. Available online: https://link.springer.com/chapter/10.1007/978-3-030-41110-7_1.10.1007/978-3-030-41110-7_1 ↗
6. Security and Privacy in the Industrial Internet of Things: Current Standards and Future Challenges10.1109/ACCESS.2020.3016937 ↗
7. Industrial Internet of Things as a Challenge for Higher Education
8. Elkhodr, M., and Shahrestani, S. (2016). The Internet of Things: New Interoperability, Management and Security Challenges. arXiv.10.5121/ijnsa.2016.8206 ↗
9. Fluchs, S., Taştan, E., Trumpf, T., Horch, A., Drath, R., and Fay, A. (2023). Traceable security-by-design decisions for cyber-physical systems (CPSs) by means of function-based diagrams and security libraries. Sensors, 23.10.3390/s23125547 ↗
10. (2018). Platform Firmware Resiliency Guidelines (Standard No. NIST SP 800-193).
11. Wang, R., and Yan, Y. (2022, January 13–16). A survey of secure boot schemes for embedded devices. Proceedings of the 2022 24th International Conference on Advanced Communication Technology (ICACT), PyeongChang, Republic of Korea.10.23919/ICACT53585.2022.9728840 ↗
12. Dent, A.W. (2024, October 01). Secure Boot and Image Authentication. Qualcomm. Available online: https://www.qualcomm.com/content/dam/qcomm-martech/dm-assets/documents/secure-boot-and-image-authentication-version_final.pdf.
13. Reffett, A., and Scanlon, R. (2024, October 01). Implications and Mitigation Strategies for the Loss of End-Entity Private Keys. Available online: https://insights.sei.cmu.edu/blog/implications-and-mitigation-strategies-for-the-loss-of-end-entity-private-keys/.
14. Tincher, L. (2024, October 01). What Is a Private Key? How Cryptocurrency Keys Work. Available online: https://www.sofi.com/learn/content/private-key/.
15. Kuzminykh, I., Yevdokymenko, M., and Ageyev, D. (2020, January 6–9). Analysis of encryption key management systems: Strengths, Weaknesses, Opportunities, Threats. Proceedings of the 2020 IEEE International Conference on Problems of Infocommunications, Science and Technology (PIC S&T), Kyiv, Ukraine.10.1109/PICST51311.2020.9467909 ↗
16. Challenges and opportunities in securing the industrial internet of things10.1109/TII.2020.3023507 ↗
17. Giaconia, M., and Bignalet, X. (2024, October 01). Demystifying the ISA/IEC 62443 and Secure Elements. Microchip AN3983. Available online: https://ww1.microchip.com/downloads/en/Appnotes/Demystifying-ISA-IEC-62443-and-Secure-Elements-DS00003983.pdf.
18. Jun, K. (2008). SRAM-Based Microcontroller Optimizes Security, Semantic Scholar.
19. Yao, J., and Zimmer, V. (2020). Building Secure Firmware: Armoring the Foundation of the Platform, Apress.10.1007/978-1-4842-6106-4 ↗
20. PiEmbSys Tech (2024, October 01). Secondary Bootloader (SBL) in Two-Stage Bootloader. Available online: https://piembsystech.com/secondary-bootloader-sbl-in-two-stage-bootloader/.
21. Nordic (2024, October 01). Signature Keys. Available online: https://docs.nordicsemi.com/bundle/ncs-latest/page/nrf/app_dev/bootloaders_dfu/mcuboot_nsib/bootloader_signature_keys.html.
22. Sharma, V. (2024, October 01). Cryptographic Agility: A Critical Enabler for Post-Quantum Resilience. Forbes. Available online: https://www.forbes.com/sites/forbestechcouncil/2022/10/10/cryptographic-agility-a-critical-enabler-for-post-quantum-resilience.
23. UPTANE (2024, October 01). Uptane Standard for Design and Implementation 2.1.0. Available online: https://uptane.org/docs/latest/standard/uptane-standard.
24. NIST (2024, October 01). Post-Quantum Cryptography (PQC) Projects Page Online, Available online: https://csrc.nist.gov/projects/post-quantum-cryptography.
25. Slabotsky, R. (2024, October 01). Inherent Risk vs. Residual Risk Explained in 90 Seconds. Available online: https://www.fairinstitute.org/blog/inherent-risk-vs.-residual-risk-explained-in-90-seconds.
26. The Emerging Threat of Ai-driven Cyber Attacks: A Review10.1080/08839514.2022.2037254 ↗
27. Artificial Intelligence in Cybersecurity: Enhancing Threat Detection and Mitigation