Analog Security and Protection

Analog security and protection is the discipline of keeping analog and mixed-signal hardware trustworthy against deliberate adversaries. As integrated circuits have grown more complex and their supply chains have spread across many companies and countries, the question is no longer only whether a circuit works, but whether it does exactly what its designer intended and nothing more. Analog blocks were long treated as inherently safe: they hold no obvious secret, and reverse engineering a continuous-time circuit is harder than reading a netlist of logic gates. That assumption has proven false. Because security analysis and countermeasures have concentrated on digital logic, the analog domain has become an attractive place to hide a malicious modification or to mount a physical attack.

This category treats hardware security in the analog domain, the protection of circuit integrity, confidentiality, and authenticity against intelligent attackers. It is distinct from electrical robustness. Protecting a circuit from electrical stress such as electrostatic discharge, overvoltage, or supply transients is covered separately under Analog Circuit Protection; that material answers the question "will the circuit survive a hostile environment," whereas the topics here answer "can the circuit be trusted in the presence of a hostile adversary." Readers looking for transient-voltage suppressors, clamps, and fail-safe design should follow that link instead.

The subject draws together several threads. A defender must reason about analog hardware Trojans, the malicious modifications an adversary can insert during design or fabrication; about the physical side channels through which a working circuit leaks its secrets; about tamper attacks that probe or perturb a device directly; and about the authentication and supply-chain controls that distinguish a genuine, unmodified part from a counterfeit or compromised one. These concerns matter most where circuit integrity bears directly on safety, money, or national security: defense and aerospace systems, medical devices, payment terminals, and critical communications and infrastructure. The two subcategories below develop the threats and the defenses in turn, and the discussion that follows draws out the principles they share.

Analog Security and Protection Topics

Analog Trojan Detection and Prevention

Confront the threat of malicious modifications, hardware Trojans, that are deliberately inserted into a circuit to leak information, degrade performance, or disable a system on command. Analog Trojans are especially insidious because they can exploit the continuous nature of analog signals to evade tests built for digital logic. A landmark example is the A2 attack demonstrated by researchers at the University of Michigan in 2016, in which a single capacitor, slowly charged by rare switching events and naturally reset by leakage, served as a near-undetectable trigger added after place and route. This subcategory develops Trojan taxonomy by insertion phase, physical form, and activation mechanism; analog-specific payloads such as parametric drift, covert leakage channels, and kill switches; detection through physical inspection, side-channel and parametric testing, and statistical outlier analysis against golden devices; and prevention through design obfuscation, high layout utilization, built-in monitors, and securing the design and fabrication flow.

Hardware Security in Analog Domains

Address the physical vulnerabilities that cryptographic algorithms and software cannot remove, because a real circuit leaks information through its power draw, electromagnetic emissions, timing, and heat. This subcategory covers side-channel attacks and their countermeasures, including simple, differential, and correlation power analysis and the masking, hiding, dual-rail logic, and on-chip regulation used to resist them; electromagnetic emanation security and the TEMPEST principles behind it; tamper-detection sensors and active shield meshes that trigger key zeroization before secrets can be read; and secure key storage. It also turns manufacturing variation into an asset through physically unclonable functions (PUFs), which derive a unique, unclonable identity from device mismatch, and through true random number generators (TRNGs), which harvest entropy from thermal and shot noise or oscillator jitter to feed cryptography, with quality judged against standards such as NIST SP 800-90B and BSI AIS 31. Analog obfuscation and split manufacturing round out the defenses against reverse engineering.

Themes Across Analog Security

The two subcategories examine offense and defense from different angles, yet a handful of ideas run through the whole field and set it apart from ordinary analog design.

The analog domain is a hiding place. Decades of security research and tooling target digital logic, so attackers gravitate to the analog layer that those tools scarcely inspect. A parametric Trojan that nudges a threshold voltage or a bias current changes no gate-level netlist and adds no visible structure, and a charge-accumulating analog trigger is tiny and dormant by design. The same property that once made analog circuits seem safe, that they resist easy formal description, is exactly what makes a hidden modification hard to find.

Physics is the channel, in both directions. A circuit cannot compute without moving charge, and moving charge has observable consequences: current draw, electromagnetic fields, delay, and heat. Attackers read these emanations to recover secret keys, and they also push on the same physics, through voltage glitches, laser pulses, or temperature extremes, to force exploitable faults. Defenders work the channel in reverse, suppressing and masking what leaks out and sensing what is pushed in. The very physical effects studied elsewhere in analog design as noise and parasitics become, here, both the attacker's tool and the defender's.

Variation can be turned from liability into identity. Process mismatch is normally the adversary of precision analog design, fought with matching, trimming, and calibration. Security inverts the relationship. A PUF treats the uncontrollable, device-unique spread of delays, offsets, and SRAM start-up states as a fingerprint that no one, not even the manufacturer, can clone, and a TRNG treats fundamental thermal and shot noise as a source of unpredictability. What another discipline labors to remove, this one harvests.

No single measure suffices; defense is layered. Every detection method has a blind spot and every countermeasure has a cost. Physical inspection misses parametric Trojans; side-channel screening misses dormant ones; masking falls to higher-order analysis; a shield mesh can be bypassed by a sufficiently determined laboratory. Real systems therefore combine techniques, raising the attacker's required time, equipment, and expertise rather than promising an impregnable wall. The aim is to make a successful attack cost more than the secret is worth.

Trust is a supply-chain property, not a circuit property. A design verified on the bench can still be compromised at an untrusted foundry, swapped for a counterfeit in distribution, or replicated beyond its licensed run. Authentication with PUFs, split manufacturing, watermarking and metering, trusted-foundry programs, and chain-of-custody controls all recognize that a part is only as trustworthy as the path it traveled from design to deployment.

Conclusion

Organizing analog electronics security around these topics shows how a single goal, a circuit that can be trusted in the presence of a capable adversary, is pursued from two complementary directions. Analog Trojan detection and prevention confronts malicious modifications hidden in the very continuity that makes analog circuits hard to inspect, while hardware security in analog domains defends against the physical leakage, tampering, and reverse engineering that no algorithm can prevent. Running through both is a striking reversal: the noise, mismatch, and physical side effects that the rest of analog design works to suppress become here the attacker's opening and, harnessed as PUFs and random-number sources, the defender's strongest tools. This security focus is distinct from, and complementary to, the electrical robustness treated under analog circuit protection; together they ensure that an analog system both survives a hostile environment and resists a hostile adversary.

Electronics Guide