Researchers from Huazhong University of Science and Technology and Hubei University have developed a spin-orbit torque (SOT)-based key generation system that unifies cryptographic key generation, concealment, and attack detection within a single spintronic device platform. By combining physically unclonable function (PUF) behavior with true random number generator (TRNG) functionality, the approach introduces a hardware-rooted security primitive in which key access is intrinsically tied to irreversible physical transformations.
At the core of the system are Ta/CoFeB/MgO/Ta spintronic Hall devices, which simultaneously host two complementary entropy sources. Dynamic entropy arises from stochastic magnetization switching under zero-field conditions, enabling true random number generation. In parallel, static entropy originates from device-to-device variations in the critical switching current caused by fabrication process deviations, allowing the extraction of unique and reproducible cryptographic keys. By applying different excitation conditions, the same physical device can switch between these two modes, generating either random numbers or device-specific keys on demand.
A central innovation lies in how the system handles key storage. Rather than persistently storing keys in nonvolatile memory, the device maintains only randomized magnetization states during idle operation. These states are statistically unrelated to any valid key, effectively concealing sensitive information at rest. Key reconstruction requires a specific excitation sequence that drives the system into a deterministic magnetic configuration. Crucially, this transition irreversibly alters the original random state, meaning the initial entropy cannot be restored once disturbed.
This physical irreversibility enables an intrinsic attack detection mechanism. Any attempt to access or probe the key—legitimate or malicious—necessarily modifies the device’s magnetic configuration, leaving a permanent and detectable trace. A comparator-based monitoring circuit evaluates discrepancies between expected and current states, flagging unauthorized transitions in real time. This allows immediate detection of illegal key access and supports rapid key revocation.
By binding key accessibility to unforgeable physical state changes, the system eliminates the possibility of covert key extraction without detection. Unlike conventional approaches that rely on external sensors or environmental monitoring, the protection mechanism is embedded directly in the device physics. The result is a unified architecture in which key generation, concealment, and tamper detection are co-located within the same spintronic hardware.
This work establishes a physical-layer security paradigm where cryptographic operations are inseparable from the underlying material behavior, offering a compact and robust solution for securing next-generation electronic systems.