REVIEW 3 major objections 6 minor 22 references
ChipletQuake: On-die Digital Impedance Sensing for Chiplet and Interposer Verification
T0 review · 3 major / 6 minor · reviewed 2026-08-16 · deepseek-v4-flash
Pith's one-line read Physical modifications in a chiplet package change the shared power network's impedance enough for a purely digital on-die sensor grid to detect them.
desk verdict Solid digital impedance-sensing demo on chiplet FPGAs, but the dormant-Trojan headline claim outruns the active/large-change experiments. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The mechanism is the shared power delivery network (PDN) used as a physical sensing channel. On the verifier chiplet, an actuator array—inverter chains driven at selected frequencies—draws current and perturbs the shared supply, while a 2D mesh of time-to-digital converters (delay lines that digitize tiny voltage-induced timing shifts) records the response. The swept frequency-dependent voltage response is treated as an impedance estimate; physical modifications change parasitic resistance, capacitance, and inductance in the PDN, shifting that estimate. The paper also selects frequencies near package/board cavity resonances, where the impedance is most sensitive to small parasitic changes.
What would settle it
Insert into the target chiplet a few hundred additional gates that are never clocked and draw no switching current, then re-run the reported $|t|>4.5$ and Wasserstein comparisons against the golden reference; if the traces do not separate, the claim that passive dormant modifications are detectable collapses. The interposer claim should be tested by physically probing or cutting an interposer wire rather than changing routing utilization.
Extended reading notes
Core claim
The central claim is that physical modifications to a chiplet or its interposer alter the impedance of the shared power delivery network regardless of the modification's size, activation state, or function, and that characterizing that impedance therefore reveals tampering. ChipletQuake implements the characterization with a 2D mesh of time-to-digital converters as sensors and inverter-chain actuators as current sources, all on the verifier chiplet. The verifier sweeps the actuator frequency, records the voltage response at a chosen set of sensor locations, and compares the resulting signature to a golden one; a deviation flags an integrity failure. On a three-chiplet FPGA, the paper reports that the method distinguishes AES, FFT, and CNN designs on an adjacent chiplet, detects a difference of four interposer communication lines, detects two different placement routings of the same design on a farther chiplet, and separates a Trojan-loaded AES implementation from a Trojan-free one using Welch's t-test and Wasserstein distance.
Load-bearing premise
The method stands or falls on the assumption that even a small, inactive physical change in a neighboring chiplet or interposer shifts the shared power network's impedance enough for the verifier's digital delay sensors to see it above noise.
Editorial extensions
If this is right
- A trusted chiplet can verify adjacent chiplets and the interposer without any direct signal connection, because sensing happens through the shared power delivery network.
- Dormant hardware Trojans that never switch can in principle be detected, because insertion alters the physical impedance even while the malicious circuit is inactive.
- The verification can be structured as a one-time physical challenge-response: random actuator, sensor, and frequency selections yield unique impedance signatures that resist replay.
- Choosing frequencies near package and board resonances concentrates sensitivity where small parasitic changes become visible to the sensors.
Reading between the lines
- A stricter test than anything in the paper would use a physically dormant payload—extra gates that never toggle—and a physically altered interposer trace; the current experiments use a power-modulating Trojan payload and a routing-utilization change instead.
- If the signatures are stable across voltage, temperature, and aging, the same impedance fingerprint could serve as an anti-counterfeit root of trust for chiplet supply chains, not just a tamper alarm.
- The random selection of actuators, sensors, and frequencies suggests a possible remote-attestation primitive, but its security depends on how much per-device entropy the physical signature actually carries.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes ChipletQuake, a fully digital framework implemented on an FPGA chiplet that estimates power-delivery-network (PDN) impedance signatures using a 2D grid of TDC sensors and inverter-chain actuators with frequency-swept excitation. The goal is post-silicon verification of adjacent chiplets and the host interposer by comparing sensed impedance traces against golden references. The evaluation uses an AMD Virtex UltraScale+ VU37P SSI FPGA with three SLRs: Case Study 1 distinguishes AES, FFT, and CNN designs on SLR1; Case Study 2 changes interposer SLL utilization from 129 to 133 lines; Case Study 3 changes placement/routing of an IP on SLR2; Case Study 4 distinguishes a Trust-Hub AES-T1100 Trojan design from a Trojan-free AES on SLR1. Distinguishability is assessed with Welch's t-test and Wasserstein distance, with reference-vs-reference negative controls.
Significance. If the claims hold, the paper introduces a useful, low-cost, fully digital mechanism for chiplet and interposer integrity verification, extending prior PDN-based fingerprinting and side-channel work to a security-verification setting. The strengths are the fully digital FPGA implementation, the systematic frequency-sweep design, the use of golden traces with no fitted parameters, the inclusion of negative-control experiments, and the use of a distribution-agnostic Wasserstein metric alongside the t-test. However, the central security claim about detecting dormant, passive, tiny malicious circuits is not exercised by the reported experiments, and the false-positive characterization lacks a multiple-testing correction, so the significance of the current evidence is below what the abstract and conclusion assert.
major comments (3)
- [IV-A and V-F] The paper's central security claim, stated in Section IV-A and repeated in VI-A and VII, is that ChipletQuake can detect dormant, passive, tiny malicious circuits without activating the target chiplet. This claim is not exercised by the experiments in Section V-F. The Trust-Hub AES-T1100 Trojan has a payload that modulates AES activity to create a power consumption pattern, so it is an active, power-drawing circuit rather than a dormant or passive one. No experiment places an unactivated, static, small malicious circuit in a neighboring chiplet, and no area, gate-count, or power-budget quantification of 'tiny' is provided. The load-bearing premise from Section I that physical modifications 'regardless of their physical size, activation, or action characteristics' alter the PDN impedance enough to be detected therefore remains unsupported by the evidence.
- [V-D] The interposer-tampering experiment does not physically modify the interposer. Changing the number of SLL interconnections from 129 to 133 changes the utilization of programmable routing resources in the FPGA configuration, which is a logical/routing-level change rather than physical insertion of metal, removal of material, or contact-based probing. The result demonstrates sensitivity to utilization-dependent current paths, but the claim in Section IV-B that this emulates 'interposer tampering and probing' overstates what was measured. The text should either add a genuine physical-interposer tamper experiment or carefully rescope the claim to utilization changes.
- [V-B and Figs. 10, 13, 16] The negative-control experiments do not quantify the false-positive rate of the decision procedure. The t-statistic is plotted over many frequency bins, and the figures appear to treat any bin exceeding |t|>4.5 as a detection, but no multiple-testing correction or family-wise error rate is reported. Under the null hypothesis, the probability of at least one bin crossing the threshold grows with the number of bins, so the observation that reference-vs-reference traces stay below the threshold at the plotted bins is not a statistically quantified reliability bound. Similarly, the Wasserstein critical values are computed per frequency point, but the overall decision rule over the frequency sweep is not defined. A precise multi-bin decision procedure and its false-positive rate are needed to support the reliability claims.
minor comments (6)
- [IV-A] In Section IV-A, 'our treat model' should be 'our threat model'; in Section III-B, 'reply attacks' should be 'replay attacks.'
- [V-D] Section V-D says 'Fig. 14 highlights the Wasserstein distance for interposer modification based on SLL utilization,' but Fig. 14 shows the SLR2 config1-versus-config2 result; the interposer Wasserstein result appears to be Fig. 11, so the cross-reference or figure numbering is inconsistent.
- [V-B] Reference [19] is cited for Welch's t-test, but the cited paper is about higher-order threshold implementations and does not appear to be the source of the test; please cite Welch's original paper or a standard leakage-assessment reference such as Schneider and Moradi.
- [III-A] Section III-A says the sensor records voltage fluctuations by 'accurately sensing the voltage,' but the TDC measures propagation delay, which is an indirect proxy for voltage; the wording should be adjusted to avoid overstating a direct voltage measurement.
- [III-C] Equation (1), the rectangular-cavity resonance formula, is not connected to the frequency points actually swept in the experiments; the text should state whether the frequency bands were selected using this formula or empirically, and how the cavity dimensions relate to the SSI package.
- [Figs. 8-17] Several figures lack axis labels with units; for example, Fig. 8 labels the y-axis 'TDC Average Distance' without units, and the frequency-axis ranges differ across figures (e.g., 300-800 MHz in Fig. 9 versus 0-900 MHz in Fig. 12), which makes cross-figure comparison difficult.
Circularity Check
No circular derivation found: the detection claims rest on empirical trace comparisons, not on fitting or definitional reuse of the target.
full rationale
ChipletQuake's derivation chain is empirical. The central premise—that physical modifications alter the shared-PDN impedance—is stated as a physical assumption (Sec. I, Sec. III-B) and is then tested by comparing golden traces against traces from modified designs, with negative same-vs-same controls (Figs. 10, 13, 16). No parameter is fitted to the golden set and then relabeled as a prediction; the t-statistic and Wasserstein distances are standard two-sample metrics applied to independent trace sets. The uniqueness assertion for K_ver (Sec. III-B) is an experimental observation rather than an imported theorem. The paper cites the authors' earlier work [5] for PDN sensitivity, but that citation supports background and is not the load-bearing argument; the chiplet-scale verification result is new measurement data. The gap between the claimed dormant/passive Trojan detection and the case studies (active AES-T1100 power-modulating Trojan, SLL utilization change, placement/routing change in SLR2) is a validation-scope question, not a circularity: the measurements are not constructed to equal the claim by definition. Therefore no circular step is exhibited and the score is 0.
Assumptions & free parameters
assumptions (3)
- domain assumption Physical modifications to chiplets or interposer alter the impedance of the shared PDN in a measurable way.
- domain assumption The verifier's TDC sensors can resolve PDN voltage fluctuations induced by the actuators at the selected frequencies with sufficient SNR.
- domain assumption Each combination of actuator, sensor, and frequency IDs yields a unique and stable impedance profile, suitable as a one-time verification key.
Cite this review
Pith. "Pith review of ChipletQuake: On-die Digital Impedance Sensing for Chiplet and Interposer Verification." pith.science (2026). https://pith.science/paper/FHQKVBO6
@misc{pith2026250419418,
author = {Pith},
title = {Pith review of: ChipletQuake: On-die Digital Impedance Sensing for Chiplet and Interposer Verification},
year = {2026},
howpublished = {\url{https://pith.science/paper/FHQKVBO6}},
note = {Machine review of arXiv:2504.19418}
}
read the original abstract
The increasing complexity and cost of manufacturing monolithic chips have driven the semiconductor industry toward chiplet-based designs, where smaller and modular chiplets are integrated onto a single interposer. While chiplet architectures offer significant advantages, such as improved yields, design flexibility, and cost efficiency, they introduce new security challenges in the horizontal hardware manufacturing supply chain. These challenges include risks of hardware Trojans, cross-die side-channel and fault injection attacks, probing of chiplet interfaces, and intellectual property theft. To address these concerns, this paper presents \textit{ChipletQuake}, a novel on-chiplet framework for verifying the physical security and integrity of adjacent chiplets during the post-silicon stage. By sensing the impedance of the power delivery network (PDN) of the system, \textit{ChipletQuake} detects tamper events in the interposer and neighboring chiplets without requiring any direct signal interface or additional hardware components. Fully compatible with the digital resources of FPGA-based chiplets, this framework demonstrates the ability to identify the insertion of passive and subtle malicious circuits, providing an effective solution to enhance the security of chiplet-based systems. To validate our claims, we showcase how our framework detects Hardware Trojan and interposer tampering.
Figures
Figures from the paper (11 more)
Reference graph
Works this paper leans on
-
[1]
A. Deric and D. Holcomb, “Know time to die–integrity checking for zero trust chiplet-based systems using between-die delay pufs,” IACR Transactions on Cryptographic Hardware and Embedded Systems , pp. 391–412, 2022
work page 2022
-
[2]
Evaluating Vulnerability of Chiplet-Based Systems to Contactless Probing Techniques
A. Deric, K. Mitard, S. Tajik, and D. Holcomb, “Evaluating vulnerability of chiplet-based systems to contactless probing techniques,” arXiv preprint arXiv:2405.14821, 2024
work page Pith review arXiv 2024
-
[3]
Sipguard: run-time system-in-package security monitoring via power noise variation,
T. Zhang, M. L. Rahman, H. M. Kamali, K. Z. Azar, and F. Farahmandi, “Sipguard: run-time system-in-package security monitoring via power noise variation,” IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 2023
work page 2023
-
[4]
Analysis of power delivery network (pdn) in bridge- chips for 2.5-d heterogeneous integration,
M. O. Hossen, A. Kaul, E. Nurvitadhi, M. D. Pant, R. Gutala, A. Dasu, and M. S. Bakir, “Analysis of power delivery network (pdn) in bridge- chips for 2.5-d heterogeneous integration,” IEEE Transactions on Com- ponents, Packaging and Manufacturing Technology, vol. 12, no. 11, pp. 1824–1831, 2022
work page 2022
-
[5]
T. Mosavirik, S. K. Monfared, M. S. Safa, and S. Tajik, “Silicon echoes: Non-invasive trojan and tamper detection using frequency-selective impedance analysis,” IACR Transactions on Cryptographic Hardware and Embedded Systems , vol. 2023, no. 4, pp. 238–261, 2023
work page 2023
-
[6]
Pdnsig: Identifying multi-tenant cloud fpgas with power distribution network-based signatures,
H. Zhu, W. Cao, and X. Zhang, “Pdnsig: Identifying multi-tenant cloud fpgas with power distribution network-based signatures,” in 2023 IEEE/ACM International Conference on Computer Aided Design (IC- CAD). IEEE, 2023, pp. 1–8
work page 2023
-
[7]
Reading between the dies: Cross-slr covert channels on multi-tenant cloud fpgas,
I. Giechaskiel, K. Rasmussen, and J. Szefer, “Reading between the dies: Cross-slr covert channels on multi-tenant cloud fpgas,” in 2019 IEEE 37th International Conference on Computer Design (ICCD) . IEEE, 2019, pp. 1–10
work page 2019
-
[8]
Fpga-based remote power side-channel attacks,
M. Zhao and G. E. Suh, “Fpga-based remote power side-channel attacks,” in 2018 IEEE Symposium on Security and Privacy (SP). IEEE, 2018, pp. 229–244
work page 2018
Show all 22 references
-
[9]
High- speed ring oscillator based sensors for remote side-channel attacks on fpgas,
J. Gravellier, J.-M. Dutertre, Y . Teglia, and P. Loubet-Moundi, “High- speed ring oscillator based sensors for remote side-channel attacks on fpgas,” in 2019 International conference on ReConFigurable computing and FPGAs (ReConFig) . IEEE, 2019, pp. 1–8
2019
-
[10]
Ahd-lam: A new mitigation method against voltage-drop attacks in multi-tenant fpgas,
M. A. Kajol, S. Sunkavilli, and Q. Yu, “Ahd-lam: A new mitigation method against voltage-drop attacks in multi-tenant fpgas,” in 2023 Asian Hardware Oriented Security and Trust Symposium (AsianHOST) . IEEE, 2023, pp. 1–6
2023
-
[11]
LaserEscape: Detecting and Mitigating Optical Probing Attacks,
S. K. Monfared, K. Mitard, A. Cannon, D. Forte, and S. Tajik, “LaserEscape: Detecting and Mitigating Optical Probing Attacks,” in 2023 IEEE/ACM International Conference on Computer Aided Design (ICCAD), 2024
2023
-
[12]
V oltage-based covert channels using fpgas,
D. R. Gnad, C. D. K. Nguyen, S. H. Gillani, and M. B. Tahoori, “V oltage-based covert channels using fpgas,” ACM Transactions on Design Automation of Electronic Systems (TODAES) , vol. 26, no. 6, pp. 1–25, 2021
2021
-
[13]
On hardware security and trust for chiplet-based 2.5 d and 3d ics: Challenges and innovations,
S. Juan, A. Fady, P. Anthony, R. Philippe et al., “On hardware security and trust for chiplet-based 2.5 d and 3d ics: Challenges and innovations,” IEEE Access, 2024
2024
-
[14]
Pycra: Physical challenge-response authentication for active sensors under spoofing attacks,
Y . Shoukry, P. Martin, Y . Yona, S. Diggavi, and M. Srivastava, “Pycra: Physical challenge-response authentication for active sensors under spoofing attacks,” in Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security , 2015, pp. 1004–1015
2015
-
[15]
Principles of remote attestation,
G. Coker, J. Guttman, P. Loscocco, A. Herzog, J. Millen, B. O’Hanlon, J. Ramsdell, A. Segall, J. Sheehy, and B. Sniffen, “Principles of remote attestation,” International Journal of Information Security , vol. 10, pp. 63–81, 2011
2011
-
[16]
Cipa: Concurrent ic and pcb authentication using on-chip ring oscillator array,
Y . Han, X. Wang, and M. Tehranipoor, “Cipa: Concurrent ic and pcb authentication using on-chip ring oscillator array,” in 2018 IEEE 27th Asian Test Symposium (ATS) . IEEE, 2018, pp. 109–114
2018
-
[17]
S. Ramo, J. R. Whinnery, and T. Van Duzer, Fields and waves in communication electronics. John Wiley & Sons, 1994
1994
-
[18]
Zero trust architecture,
V . Stafford, “Zero trust architecture,” NIST special publication, vol. 800, p. 207, 2020
2020
-
[19]
Higher-order threshold implementations,
B. Bilgin, B. Gierlichs, S. Nikova, V . Nikov, and V . Rijmen, “Higher-order threshold implementations,” in Advances in Cryptology– ASIACRYPT 2014: 20th International Conference on the Theory and Application of Cryptology and Information Security, Kaoshiung, Taiwan, ROC, Decem...
2014
-
[20]
Leakage assessment methodology: A clear roadmap for side-channel evaluations,
T. Schneider and A. Moradi, “Leakage assessment methodology: A clear roadmap for side-channel evaluations,” in Cryptographic Hardware and Embedded Systems–CHES 2015: 17th International Workshop, Saint- Malo, France, September 13-16, 2015, Proceedings 17. Springer, 2015, pp. 495–513
2015
-
[21]
Wasserstein generative ad- versarial networks,
M. Arjovsky, S. Chintala, and L. Bottou, “Wasserstein generative ad- versarial networks,” in International conference on machine learning . PMLR, 2017, pp. 214–223
2017
-
[22]
Hardware Trojan Benchmarks,
Trust-Hub, “Hardware Trojan Benchmarks,” [Online]https://trust-hub. org, 2025. 9
2025
Reviewed August 16, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.