Cloneless1

KO | EN

gitlite — search

#javascript #ai #typescript #golang #android #docker #nodejs #java #cli #kubernetes #awesome-list #pytorch #security #mcp

(★ 24)

Cloneless1 is an open-source tamper-resistant cryptographic ASIC design

Cloneless1 Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Cloneless1
Cloneless1 is the first in a series of planned tamper-resistant cryptographic open-source silicon designs. It uses GlobalFoundries' 180nm open-source PDK [GF180MCU](https://gf180mcu-pdk.readthedocs.io/en/latest), the [wafer.space](https://wafer.space) [project template](https://github.com/wafer-space/gf180mcu-project-template) and has been successfully manufactured via [wafer.space GF180MCU Run 1](https://www.crowdsupply.com/wafer-space/gf180mcu-run-1). The Cloneless1 ASIC was designed using the [librelane](https://librelane.readthedocs.io/en/latest) EDA tool flow and can be fully and easily reproduced from the sources and scripts provided in this repository.

Important external links:
- [Cloneless_artifacts](https://github.com/ThorbenMoos/Cloneless_artifacts)
- [Cloneless2](https://github.com/ThorbenMoos/Cloneless2)

## News (as of 27.07.26)
- (!) The [Cloneless2](https://github.com/ThorbenMoos/Cloneless2) design is final and publicly available.
- Cloneless2 is currently being manufactured via [wafer.space GF180MCU Run 2](https://www.crowdsupply.com/wafer-space/gf180mcu-run-2) and brings several novelties compared to Cloneless1.
- The physical security evaluation and characterization efforts of the Cloneless1 silicon are progressing well.
- More details are coming soon.

## News (as of 25.06.26)
- The Cloneless1 chips have been successfully manufactured, delivered and tested.
- Open-source PCB designs, FPGA controllers, verification collateral and software artifacts are available in the [Cloneless_artifacts](https://github.com/ThorbenMoos/Cloneless_artifacts) repository.
- The protected block cipher implementation of Cloneless1 has been successfully evaluated against 100 million power traces.
- The TRNG and PUF implementations all work in principle, but require further testing across many samples.
- In short, most PUF configurations look decent for a first attempt in this node, most TRNG configurations need more tuning.
- Cloneless2 is already in development and will be part of [wafer.space GF180MCU Run 2](https://www.crowdsupply.com/wafer-space/gf180mcu-run-2).
- More details are coming soon.

![A KLayout screenshot of the Cloneless1 ASIC](https://raw.githubusercontent.com/ThorbenMoos/Cloneless1/main/layout.png)

## (Re-)Producing the Chip Design
After cloning the repository (```git clone https://github.com/ThorbenMoos/Cloneless1```) and performing a short environment setup, (re-)producing the entire chip design with all its intermediate stages and files should be as easy as a single call to the Makefile. To have that work, make sure to install [ghdl](https://github.com/ghdl/ghdl), [iverilog (Icarus Verilog)](https://github.com/steveicarus/iverilog), the make utility and the [nix](https://github.com/NixOS/nix) package manager. On Ubuntu Server 24.04 LTS the following commands have been tested for installing these utilities:

```
sudo snap install ghdl
sudo apt update
sudo apt install make
sudo apt install verilog
curl --proto '=https' --tlsv1.2 -sSf -L https://install.determinate.systems/nix | sh -s -- install --prefer-upstream-nix --no-confirm --extra-conf "
    extra-substituters = https://nix-cache.fossi-foundation.org
    extra-trusted-public-keys = nix-cache.fossi-foundation.org:3+K59iFwXqKsL7BNu6Guy0v+uTlwsxYQxjspXzqLYQs=
"
```

Once these steps are completed, a new terminal needs to be opened and ```nix-shell``` can be called in the main directory of this repository. Inside the shell simply call ```make``` and wait for the results (using a machine with at least 32 GB memory is recommended). The Makefile verifies testbenches, converts the sources, clones the PDK and executes the librelane flow, first to pre-harden some macros and then to implement the overall chip design. With the provided configuration, the overall runtime will be 8-11 hours on most machines. The GDS is usually ready after 3-4 hours (after fill insertion), the remaining time is for sign-off steps and the final manufacturability check. If everything goes well, the design should pass all Antenna, DRC and LVS checks, both in the initial flow and the precheck.

**Bugfix (23.01.26)**: There was a small reproducibility error which has now been fixed. Running KLayout DRC within the initial chip flow led to (minor) changes in the GDS that were not present in the submitted file (and even caused an Antenna error). The updated flow skips this step in the initial flow and instead performs the full [wafer.space precheck](https://github.com/wafer-space/gf180mcu-precheck/tree/main) afterwards to produce exactly the foundry-submitted GDS (verified through KLayout Diff/XOR).

You may download the original [GDS](https://thorbenmoos.de/Cloneless1.gds.zip) (zip, 59 MB) and [postlayout netlist](https://thorbenmoos.de/Cloneless1.nl.v.zip) (zip, 6 MB) here to compare your results against. While regular hashes/checksums are expected to differ (due to timestamps and other artifacts), KLayout Diff/XOR should report no differences.

## RTL Design
The RTL design is fully written in VHDL, all sources are located in the ```src``` folder. Many high-level modules make use of generics to keep the designs parametrizable and useful beyond their concrete instantiation in this project. Conversion from VHDL to Verilog for compatibility with the EDA tool is performed with ghdl.

## Science and Cryptography
The Cloneless1 design implements and/or leverages the following scientific results and cryptographic primitives:

- The mid-pSquare block cipher [1] which is an instance of the Feistel for Prime Masking (FPM) family of tweakable block ciphers [2].
- Inner-product masking over a Mersenne prime field, combining results of [3], [4] and [5] for both side-channel and fault resistance.
- The arbitrary-order masked and trivially composable gadgets for squaring proposed in [6].
- Duplication with redundant error checks for fault resistance.
- The Edge-Sampling based True Random Number Generator (ES-TRNG) [7] for seed generation.
- The Trivium stream cipher [8] for concurrent pseudo-randomness generation from the initial seed as recommended in [9].
- A Ring-Oscillator based Physically Unclonable Function (RO-PUF) first introduced in [10] to generate private key material.

The mid-pSquare cipher implementation uses two shares and two redundancy domains. Raw outputs of some exemplary TRNG and PUF designs with different parametrization are accessible via the framework. Error-corrected TRNG and PUF outputs used for key and randomness generation are not accessible via the interface.

[1]: https://doi.org/10.46586/tches.v2025.i4.486-519, https://github.com/uclcrypto/mid-pSquare  
[2]: https://doi.org/10.1007/978-3-031-58734-4_7, https://github.com/uclcrypto/small-pSquare  
[3]: https://doi.org/10.1007/978-3-031-30634-1_20  
[4]: https://doi.org/10.46586/tches.v2024.i4.690-736  
[5]: https://doi.org/10.1007/978-981-95-5096-8_17  
[6]: https://doi.org/10.46586/tches.v2023.i2.482-518, https://github.com/uclcrypto/prime_field_masking_hardware  
[7]: https://doi.org/10.13154/tches.v2018.i3.267-292  
[8]: https://doi.org/10.1007/11836810_13  
[9]: https://doi.org/10.62056/akdkp2fgx, https://github.com/uclcrypto/randomness_for_hardware_masking  
[10]: https://doi.org/10.1145/1278480.1278484

## Functionality and Purpose
The Cloneless1 chip encrypts plaintexts with the mid-pSquare block cipher and outputs the respective ciphertexts. It is designed to do so without revealing intermediate computation results to physical adversaries. The primary cryptographic key that can be used is hardcoded in shared form and identical for all samples of the chip. The secondary cryptographic key that can be selected via the configuration registers derives some entropy from error-corrected RO-PUF responses and should be different between any two chip samples (the level of stability is yet to be tested). The purpose of the design is to provide an open and verifiable testing target for all kinds of physical attacks. In particular, it is designed to empirically evaluate the effectiveness of the employed combination of protection mechanisms. Furthermore, the raw PUF and TRNG responses that are accessible via the toplevel interface are meant for characterization of oscillator behavior in the technology to determine proper parametrization for future iterations in the Cloneless series. Finally, the design is meant to experimentally evaluate whether the combination of leakage-resilient secret sharing and tamper-evident delay-based PUFs can become a viable protection against invasive physical adversaries without relying on obscurity or obfuscation.

## Disclaimer
This is our first attempt at building a tamper-resistant cryptographic ASIC using fully open-source EDA tools and PDKs only. While the cryptography, science and high-level design principles should be sound (see the referenced peer-reviewed articles), it is possible, even likely, that the low-level implementation contains flaws that will affect the functionality and/or intended security properties. The plan is to discover such mistakes, report them and learn from them in the open, instead of behind closed doors as typically done in cryptographic IC design. As is, the design is not concretely useful beyond research purposes, as the chip aims at experimental verification of the physical security properties instead of providing full end-to-end security. The design and documentation target research-level quality and [TRL](https://en.wikipedia.org/wiki/Technology_readiness_level) 3.

## Citing
To reference the current release in academic publications you may use the following DOI link. It lets you generate citations in common formats.

[![DOI](https://zenodo.org/badge/1118386248.svg)](https://doi.org/10.5281/zenodo.18184084)

## Acknowledgement
This work has been supported by the [PBS Foundation](https://pbs.foundation) via Project SOVereign.

Cloneless1

Cloneless1 Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Cloneless1

Cloneless1 Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README