PLCrypto: A Symmetric Cryptographic Library for Programmable Logic Controllers

Authors

  • Zheng Yang Southwest University, Chongqing, China
  • Zhiting Bao Chongqing Institute of Engineering, Chongqing, China
  • Chenglu Jin Centrum Wiskunde & Informatica, Amsterdam, The Netherlands
  • Zhe Liu Nanjing University of Aeronautics and Astronautics, Nanjing, China
  • Jianying Zhou Singapore University of Technology and Design, Singapore, Singapore

DOI:

https://doi.org/10.46586/tosc.v2021.i3.170-217

Keywords:

Programmable Logic Controllers, Industrial Automation, Symmetric Cryptography, Cryptographic Library

Abstract

Programmable Logic Controllers (PLCs) are control devices widely used in industrial automation. They can be found in critical infrastructures like power grids, water systems, nuclear plants, manufacturing systems, etc. This paper introduces PLCrypto, a software cryptographic library that implements lightweight symmetric cryptographic algorithms for PLCs using a standard PLC programming language called structured text (ST). To the best of our knowledge, PLCrypto is the first ST-based cryptographic library that is executable on commercial off-the-shelf PLCs. PLCrypto includes a wide range of commonly used algorithms, totaling ten algorithms, including one-way functions, message authentication codes, hash functions, block ciphers, and pseudo-random functions/generators. PLCrypto can be used to protect the confidentiality and integrity of data on PLCs without additional hardware or firmware modification. This paper also presents general optimization methodologies and techniques used in PLCrypto for implementing primitive operations like bit-shifting/rotation, substitution, and permutation. The optimization tricks we distilled from our practice can also guide future implementation of other computationheavy programs on PLCs. To demonstrate a use case of PLCrypto in practice, we further realize a cryptographic protocol called proof of aliveness as a case study. We benchmarked the algorithms and protocols in PLCrypto on a commercial PLC, Allen Bradley ControlLogix 5571, which is widely used in the real world. Also, we make our source codes publicly available, so plant operators can freely deploy our library in practice.

Downloads

Published

2021-09-17

How to Cite

Yang, Z., Bao, Z., Jin, C., Liu, Z., & Zhou, J. (2021). PLCrypto: A Symmetric Cryptographic Library for Programmable Logic Controllers. IACR Transactions on Symmetric Cryptology, 2021(3), 170–217. https://doi.org/10.46586/tosc.v2021.i3.170-217

Issue

Section

Articles