SPSE-AP: A Lightweight Security Authentication Protocol for SRAM PUF Space Expansion

As a lightweight hardware security primitive, SRAM PUF generates keys for IoT authentication but is limited by its small Challenge-Response Pair (CRP) space, restricting the number of authentications. To address this, we propose SPSE-AP, a security authentication protocol designed for SRAM PUF Space Expansion. SPSE-AP expands CRPs during registration by randomly accessing data in SRAM and further increases authentication instances using splitting, permutation, and sampling in the authentication phase. Security analysis shows that SPSE-AP effectively defends against various attacks on SRAM PUF, achieving an average overhead of only 31.8% compared to similar protocols while using only hash functions for compression.