Indonesian Journal of Electrical Engineering and Computer Science Vol. 25, No. 1, January 2022, pp. 105∼112 ISSN: 2502-4752, DOI: 10.11591/ijeecs.v25.i1.pp105-112 ❒ 105 Lightweight hardware fingerprinting solution using inherent memory in off-the-shelf commodity devices Mohd Syafiq Mispan 1,4,5 , Aiman Zakwan Jidin 1,4,5 , Muhammad Raihaan Kamaruddin 2,4,5 , Haslinah Mohd Nasir 3,4,5 1 Micro and Nano Electronics (MiNE), Melaka, Malaysia 2 Machine Learning and Signal Processing (MLSP), Melaka, Malaysia 3 Advance Sensors and Embedded Controls System (ASECs), Melaka, Malaysia 4 Centre for Telecommunication Research and Innovation (CeTRI), Melaka, Malaysia 5 Fakulti Teknologi Kejuruteraan Elektrik dan Elektronik, Universiti Teknikal Malaysia Melaka, Melaka, Malaysia Article Info Article history: Received Mar 9, 2021 Revised Oct 22, 2021 Accepted Nov 16, 2021 Keywords: ATMega2560 Hardware security Physical unclonable function SRAM-PUF ABSTRACT An emerging technology known as Physical unclonable function (PUF) can provide a hardware root-of-trust in building the trusted computing system. PUF exploits the intrinsic process variations during the integrated circuit (IC) fabrication to generate a unique response. This unique response differs from one PUF to the other similar type of PUFs. Static random-access memory PUF (SRAM-PUF) is one of the memory- based PUFs in which the response is generated during the memory power-up process. Non-volatile memory (NVM) architecture like SRAM is available in off-the-shelf mi- crocontroller devices. Exploiting the inherent SRAM as PUF could wide-spread the adoption of PUF. Therefore, in this study, we evaluate the suitability of inherent SRAM available in ATMega2560 microcontroller on Arduino platform as PUF that can pro- vide a unique fingerprint. First, we analyze the start-up values (SUVs) of memory cells and select only the cells that show random values after the power-up process. Subsequently, we statistically analyze the characteristic of fifteen SRAM-PUFs which include uniqueness, reliability, and uniformity. Based on our findings, the SUVs of fifteen on-chip SRAMs achieve 42.64% uniqueness, 97.28% reliability, and 69.16% uniformity. Therefore, we concluded that the available SRAM in off-the-shelf com- modity hardware has good quality to be used as PUF. This is an open access article under the CC BY-SA license. Corresponding Author: Mohd Syafiq Mispan Fakulti Teknologi Kejuruteraan Elektrik dan Elektronik, Universiti Teknikal Malaysia Melaka Taman Tasik Utama, 75450 Ayer Keroh, Melaka, Malaysia Email: syafiq.mispan@utem.edu.my 1. INTRODUCTION Physical unclonable function (PUF) is a promising technology as a hardware fingerprinting solution for a trusted computing system by providing a root-of-trust. PUF exploits the intrinsic manufacturing process variations during integrated circuit (IC) fabrication. The intrinsic process variations embodied in the silicon chip acts as a random function for a PUF which can uniquely map a set of challenges to a set of responses, known as challenge-response pairs (CRPs). These CRPs are random and show a device-specific property that can be applied in IC identification and authentication, and cryptographic key generation application [1]. Several PUFs have been proposed in the past [2], [3]. Static random-access memory PUF (SRAM- PUF) is one of the previously proposed PUFs and it is categorized as memory-based PUF [4], [5]. Further, Journal homepage: http://ijeecs.iaescore.com