Search papers, labs, and topics across Lattice.
This paper systematically evaluates the SMARM remote attestation scheme in real-time operating systems (RTOS), addressing its limitations in non-interruptible memory measurements. By implementing SMARM on ARM TrustZone-M hardware with FreeRTOS and Zephyr, the authors introduce the Frequency Accuracy Ratio (FAR) to assess the compatibility of attestation with real-time workloads. The findings reveal a critical trade-off between block size and system performance, leading to the development of SMARM+, which enhances the original scheme by reducing secure-storage requirements while maintaining security and real-time functionality.
Real-time compatibility of remote attestation schemes can be drastically improved without compromising security, but only if the right block sizes are chosen.
Remote attestation (RA) is a lightweight security primitive for detecting software compromise on IoT devices. Traditional RA schemes require atomic, non-interruptible memory measurements, making them difficult to deploy alongside real-time workloads. SMARM addresses this limitation by measuring memory in a secret, shuffled block order, reducing the non-interruptibility period to the duration of a single block measurement. However, SMARM was originally designed for microkernel-based systems and has not been studied in RTOS-driven real-time environments. In this work, we present the first systematic study of SMARM in real-time RTOS-based setups. We implement SMARM on commodity ARM TrustZone-M hardware running FreeRTOS and Zephyr, and introduce the Frequency Accuracy Ratio (FAR) to quantify the extent to which attestation can coexist with real-time execution under varying workloads. Our evaluation shows that SMARM's real-time compatibility is highly sensitive to block size: large blocks significantly degrade real-time availability, while small blocks incur substantial secure-storage overhead, limiting deployability on memory-constrained devices. To address this limitation, we propose SMARM+, a family of enhanced SMARM variants consisting of SMARM+PRNG and SMARM+FPE. They are designed to reduce secure-storage requirements while preserving SMARM's security guarantees and real-time behavior. Our evaluation highlights the trade-off between secure-storage reduction, attestation runtime, and energy overhead, and provides guidance on selecting among SMARM, SMARM+PRNG, and SMARM+FPE for different deployment settings.
