Physical unclonable functions (PUFs), physical objects that are practically unclonable because of their andom and uncontrollable manufacturing variations, are becoming increasingly popular as security primitives and unique identifiers in a fully digitized world. One of the central PUF premises states that both friends and foes, both legitimate manufacturers and external attackers alike, cannot clone a PUF, producing two instances that are the same. Using the latest nanofabrication techniques, we show that this premise is not always met: We demonstrate the possibility of effective PUF duplication through sophisticated manufacturers by producing 63 copies of a non-trivial optical scattering structure which exhibit essentially the same scattering behavior. The remaining minuscule differences are close to or below noise levels, whence the duplicates have to be considered fully equivalent from a PUF perspective. The possibility for manufacturer-based optical PUF duplication has positive and negative consequences at the same time: While fully breaking the security of certain schemes, it enables new applications, too. For example, it facilitates unforgeable labels for valuable items; the first key-free group identification schemes over digital networks; or new types of encryption/decryption devices that do not contain secret keys.
Physical unclonable functions (PUFs), physical objects that are practically unclonable because of their andom and uncontrollable manufacturing variations, are becoming increasingly popular as security primitives and unique identifiers in a fully digitized world. One of the central PUF premises states that both friends and foes, both legitimate manufacturers and external attackers alike, cannot clone a PUF, producing two instances that are the same. Using the latest nanofabrication techniques, we show that this premise is not always met: We demonstrate the possibility of effective PUF duplication through sophisticated manufacturers by producing 63 copies of a non-trivial optical scattering structure which exhibit essentially the same scattering behavior. The remaining minuscule differences are close to or below noise levels, whence the duplicates have to be considered fully equivalent from a PUF perspective. The possibility for manufacturer-based optical PUF duplication has positive and negative consequences at the same time: While fully breaking the security of certain schemes, it enables new applications, too. For example, it facilitates unforgeable labels for valuable items; the first key-free group identification schemes over digital networks; or new types of encryption/decryption devices that do not contain secret keys.
A Physical Unclonable Function (PUF) is a device with unique behaviour that is hard to clone hence providing a secure fingerprint. A variety of PUF structures and PUF-based applications have been explored theoretically as well as being implemented in practical settings. Recently, the inherent unclonability of quantum states has been exploited to derive the quantum analogue of PUF as well as new proposals for the implementation of PUF. We present the first comprehensive study of quantum Physical Unclonable Functions (qPUFs) with quantum cryptographic tools. We formally define qPUFs, encapsulating all requirements of classical PUFs as well as introducing a new testability feature inherent to the quantum setting only. We use a quantum game-based framework to define different levels of security for qPUFs: quantum exponential unforgeability, quantum existential unforgeability and quantum selective unforgeability. We introduce a new quantum attack technique based on the universal quantum emulator algorithm of Marvin and Lloyd to prove no qPUF can provide quantum existential unforgeability. On the other hand, we prove that a large family of qPUFs (called unitary PUFs) can provide quantum selective unforgeability which is the desired level of security for most PUF-based applications.
With the accelerating expansion of connectivity, the need for advanced cyber-physical security technologies that bridge the digital and physical worlds is becoming more crucial than ever. Physically unclonable functions (PUFs) leveraging nanotechnologies and photonic technologies are emerging as practical and deployable hardware security solutions that go beyond software-based hardware security. Optics- and photonics-based PUFs (often referred to as optical PUFs) offer a range of characteristics beneficial to multiplex strategies that incorporate multilevel and multimodal approaches, based on their fundamental optical and photonic properties. PUFs are categorized as multilevel when multiple responses are generated from a single type of challenge, such as a light source or optical tool. In contrast, they are classified as multimodal when multiple responses are created from various types of challenges involving a combination of different light sources and optical tools. This review highlights recent advances and progress in integrating emerging materials, detection tools, authentication methods, imaging techniques, reconfigurability, and unclonability, which are essential for advancing next-generation multiplex PUFs. To facilitate real-world applications and to support deployment in real-world senarios, we also discuss existing limitations in multiplex optical PUFs and explore potential strategies to overcome such challenges, supporting our increasingly hyperconnected society.
The hallmark of the information age is the ease with which information is stored, accessed, and shared throughout the globe. This is enabled, in large part, by the simplicity of duplicating digital information without error. Unfortunately, an ever-growing consequence is the global threat to security and privacy enabled by our digital reliance. Specifically, modern secure communications and authentication suffer from formidable threats arising from the potential for copying of secret keys stored in digital media. With relatively little transfer of information, an attacker can impersonate a legitimate user, publish malicious software that is automatically accepted as safe by millions of computers, or eavesdrop on countless digital exchanges. To address this vulnerability, a new class of cryptographic devices known as physical unclonable functions (PUFs) are being developed. PUFs are modern realizations of an ancient concept, the physical key, and offer an attractive alternative for digital key storage. A user derives a digital key from the PUF’s physical behavior, which is sensitive to physical idiosyncrasies that are beyond fabrication tolerances. Thus, unlike conventional physical keys, a PUF cannot be duplicated and only the holder can extract the digital key. However, emerging machine learning (ML) methods are remarkably adept at learning behavior via training, and if such algorithms can learn to emulate a PUF, then the security is compromised. Unfortunately, such attacks are highly successful against conventional electronic PUFs. Here, we investigate ML attacks against a nonlinear silicon photonic PUF, a novel design that leverages nonlinear optical interactions in chaotic silicon microcavities. First, we investigate these devices’ resistance to cloning during fabrication and demonstrate their use as a source of large volumes of cryptographic key material. Next, we demonstrate that silicon photonic PUFs exhibit resistance to state-of-the-art ML attacks due to their nonlinearity and finally validate this resistance in an encryption scenario.
Physical unclonable functions (PUFs) are physical structures that are hard to clone and have a unique challenge-response behavior. The term PUF was coined by Pappu et al. in 2001. That work triggered a lot of interest, and since then a substantial number of papers has been written about the use of a wide variety of physical structures for different security purposes such as identification, authentication, read-proof key storage, key distribution, tamper evidence, anti-counterfeiting, software-to-hardware binding and trusted computing. In this paper we propose a new security primitive: the quantum-readout PUF (QR-PUF). This is a classical PUF, without internal quantum degrees of freedom, which is challenged using a quantum state, e.g. a single-photon state, and whose response is also a quantum state. By the no-cloning property of unknown quantum states, attackers cannot intercept challenges or responses without noticeably disturbing the readout process. Thus, a verifier who sends quantum states as challenges and receives the correct quantum states back can be certain that he is probing a specific QR-PUF without disturbances, even if the QR-PUF is far away "in the field" and under hostile control. For PUFs whose information content is not exceedingly large, all currently known PUF-based authentication and anti-counterfeiting schemes require trusted readout devices in the field. Our quantum readout scheme has no such requirement. Furthermore, we show how the QR-PUF authentication scheme can be interwoven with quantum key exchange (QKE), leading to an authenticated QKE protocol between two parties. This protocol has the special property that it requires no a priori secret shared by the two parties, and that the quantum channel is the authenticated channel, allowing for an unauthenticated classical channel. We provide security proofs for a limited class of attacks. The proofs depend on the physical unclonability of PUFs and on the practical infeasibility of building a quantum computer.
Because of advancements in digital communication and associated technology, security and privacy have become crucial. Physical Unclonable Function (PUF) is one of the promising security solutions due to their adaptability, reliability, and secure nature. PUFs are unique identifiers that can be presented in many forms due to their unique structure and application. However, their application might be limited due to the reliability and fabrication process. Hence, a new PUF is proposed in this study, which comprises a semi-distributed fiber optic device. The proposed solution can overcome reliability concerns based on the unique behavior of biosensors and offers a simple fabrication process. Based on the random information of the physical characteristics, Physical Unclonable Functions has demonstrated potential for secure device authentication. This thesis describes the design, implementation, and evaluation of semi-distributed fiber optic devices as robust PUFs. Using intrinsic variability of fiber optic interferometric configurations, each device produces a unique spectrum showing good intra-device repeatability and high inter-device differentiation. Experimental validation of spectral reflectivity measurements confirms low internal variability, crucial for reliable authentication. In addition to these correlations, this research shows extensive simulations, allowing us to thoroughly analyze device uniqueness and stability, across a broad range of environmental scenarios. The proposed semi-distributed type of the fiber optic PUFs is promising solutions for secure and scalable authentication in applications that require high levels of security and integrity. This study represents a step towards the practical deployment and enhancement of fiber-optic PUF solutions into secure systems verification.
Physical Unclonable Functions (PUFs) provide hardware-level security by exploiting intrinsic randomness to produce device-unique responses. However, machine learning and side-channel attacks increasingly undermine their classical assumptions, calling for new approaches to ensure unforgeability. Quantum mechanics naturally supports this goal through intrinsic randomness and the no-cloning theorem, motivating the study of Quantum Physical Unclonable Functions (QPUFs). Yet, existing QPUF models often assume ideal unitary dynamics, neglecting non-unitary effects such as decoherence and dissipation that arise in real quantum devices. This work introduces a new class of non-unitary QPUFs that leverage open quantum system dynamics as a foundation for security. Three architectures are proposed: the Dissipative QPUF (D-QPUF), which uses amplitude damping as an entropy source; the Measurement-Feedback QPUF (MF-QPUF), which employs mid-circuit measurements and conditional unitaries; and the Lindbladian QPUF (L-QPUF), which models Markovian noise via the Lindblad master equation and Trotter-Suzuki decomposition. Simulation results show that these non-unitary designs achieve strong uniqueness, uniformity, and unforgeability, with controllable reliability trade-offs from stochastic noise. The L-QPUF, in particular, exhibits exponential modeling resistance under limited challenge-response access. By reframing environmental noise as a constructive resource, this work establishes a framework for noise-aware quantum hardware authentication and highlights non-unitary evolution as a viable foundation for post-quantum security.