CHISEL - Chiplet-based High Integrity Secure Embedded Link

Navy shipboard computing applications have unique requirements including space availability, cable routing, upgradeability in brief time windows, maintainability, performance, redundancy, and cybersecurity. Modern technologies promise to address many of these issues but may introduce new cybersecurity concerns. A specific technology, multi-die ìchipletî based systems, is promising for Navy applications but significantly changes the way that computer and network security must be designed and tested. Instead of racks of individual computing systems connected via network switches, End Cryptographic Units (ECU), and network guards, a chiplet solution could reduce this infrastructure to a small number of hardware modules. This chiplet based solution must still meet National Institute of Standards and Technology (NIST), National Industrial Security Program Operating Manual (NISPOM), and related Department of Defense (DoD) requirements for handling data including support for multiple classification levels. In addition, the design must support achieving and maintaining Authority to Operate (ATO). While this new system design presents security challenges, it also presents new security opportunities. Specifically extending hardware-based protections to a holistic approach which could significantly enhance system robustness in high threat environments.ÝÝSecmation proposes to develop the Chiplet-based High-Integrity Secure Embedded Link (CHISEL) solution as a method to enhance Computing Infrastructure Resilience (CIR). CHISEL leverages the Universal Chiplet Express (UCIe) standard, extending it with high assurance protections needed for Department of Defense (DoD) applications. Key goals of CHISEL are:Integrating hardware, software, and firmware security features in an innovative architecture that takes advantage of the chiplet based system features to provide enhanced security protection.Implementation of a layered, segmented on-chip network with associated monitoring and control enabling data handling at multiple classification levels using a DoD purpose-built, reusable security chiplet.Mandatory implementation of zero-trust protections for the on-chip network and secure attestation to extend the network between chips.Integration of Anti-Tamper features to the chiplet design enabling broad use of the architecture in multiple Navy and DoD applications.Maintaining open standard interfaces ensuring multi-vendor design options while providing supply chain protections through use of a reviewed and certified security architecture.