Hardware Security
Why is error correction (such as helper data) combined with PUFs when deriving keys?
- ASome PUF output bits can change between readings due to temperature, voltage and noise, while the key must be exactly the same every time
- BEvery PUF output bit inverts on each reading
- CError correction automatically doubles the key length
Show answer and explanation
Answer: A. Some PUF output bits can change between readings due to temperature, voltage and noise, while the key must be exactly the same every time
PUF values are set by manufacturing variation, but cells whose two options differ only slightly may read differently depending on temperature, voltage and noise. A cryptographic key is useless if even one bit differs, so at enrollment auxiliary information called helper data is created, and at each readout an error-correcting code fixes the fluctuating bits before the key is derived. Helper data is constructed so that it does not reveal the key itself.
- A. Correct. Small fluctuations are corrected before deriving the key.
- B. Most bits stay the same each time.
- C. It is not for lengthening the key.