Solution-Processed Carbon Nanotube True Random Number

Jul 3, 2017 - Toward this end, hardware true random number generators (TRNGs), commonly used to create encryption keys, offer significant advantages o...
2 downloads 13 Views 2MB Size
Subscriber access provided by NORTH CAROLINA STATE UNIV

Communication

Solution-Processed Carbon Nanotube True Random Number Generator William A Gaviria Rojas, Julian J McMorrow, Michael L Geier, Qianying Tang, Chris H. Kim, Tobin J. Marks, and Mark C Hersam Nano Lett., Just Accepted Manuscript • DOI: 10.1021/acs.nanolett.7b02118 • Publication Date (Web): 03 Jul 2017 Downloaded from http://pubs.acs.org on July 6, 2017

Just Accepted “Just Accepted” manuscripts have been peer-reviewed and accepted for publication. They are posted online prior to technical editing, formatting for publication and author proofing. The American Chemical Society provides “Just Accepted” as a free service to the research community to expedite the dissemination of scientific material as soon as possible after acceptance. “Just Accepted” manuscripts appear in full in PDF format accompanied by an HTML abstract. “Just Accepted” manuscripts have been fully peer reviewed, but should not be considered the official version of record. They are accessible to all readers and citable by the Digital Object Identifier (DOI®). “Just Accepted” is an optional service offered to authors. Therefore, the “Just Accepted” Web site may not include all articles that will be published in the journal. After a manuscript is technically edited and formatted, it will be removed from the “Just Accepted” Web site and published as an ASAP article. Note that technical editing may introduce minor changes to the manuscript text and/or graphics which could affect content, and all legal disclaimers and ethical guidelines that apply to the journal pertain. ACS cannot be held responsible for errors or consequences arising from the use of information contained in these “Just Accepted” manuscripts.

Nano Letters is published by the American Chemical Society. 1155 Sixteenth Street N.W., Washington, DC 20036 Published by American Chemical Society. Copyright © American Chemical Society. However, no copyright claim is made to original U.S. Government works, or works produced by employees of any Commonwealth realm Crown government in the course of their duties.

Page 1 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

Solution-Processed Carbon Nanotube True Random Number Generator Authors: William A. Gaviria Rojas1*, Julian J. McMorrow1*, Michael L. Geier1, Qianying Tang3, Chris H. Kim3, Tobin J. Marks1,2, and Mark C. Hersam1,2,4 Affiliations: 1

Department of Materials Science and Engineering, Northwestern University, Evanston, Illinois

60208, USA. 2

Department of Chemistry, Northwestern University, Evanston, Illinois 60208, USA.

3

Department of Electrical and Computer Engineering, University of Minnesota, Minneapolis, MN

55455, USA. 4

Department of Electrical Engineering and Computer Science, Northwestern University,

Evanston, Illinois 60208, USA. *These authors contributed equally to this work Correspondence should be addressed to M.C.H. ([email protected])

KEYWORDS: thin-film transistor; printed electronics; Internet of Things; encryption; cybersecurity

1   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

TABLE OF CONTENTS GRAPHIC:

ABSTRACT: With the growing adoption of interconnected electronic devices in consumer and industrial applications, there is increasing demand for robust security protocols when transmitting and receiving sensitive data. Towards this end, hardware true random number generators (TRNGs), commonly used to create encryption keys, offer significant advantages over software pseudo-random number generators. However, the vast network of devices and sensors envisioned for the Internet of Things will require small, low-cost, and mechanically flexible TRNGs with low computational complexity. These rigorous constraints position solution-processed semiconducting single-walled carbon nanotubes (SWCNTs) as leading candidates for nextgeneration security devices. Here, we demonstrate the first TRNG using static random access memory (SRAM) cells based on solution-processed SWCNTs that digitize thermal noise to generate random bits. This bit generation strategy can be readily implemented in hardware with minimal transistor and computational overhead, resulting in an output stream that passes standardized statistical tests for randomness. By using solution-processed semiconducting SWCNTs in a low-power, complementary architecture to achieve TRNG, we demonstrate a promising approach for improving the security of printable and flexible electronics.

2   ACS Paragon Plus Environment

Page 2 of 18

Page 3 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

MAIN TEXT: The proliferation of networked physical devices, such as wearable technologies and embedded electronic systems, has enabled unprecedented levels of data collection, exchange, and analysis.1,

2

As more interconnected devices are developed to manage personal and sensitive

information, there is a growing need for robust security primitives. Random number generators are of paramount importance in these security applications since they are commonly combined with other primitives to generate encryption keys.3-5 While software-based pseudo-random number generators are often employed for this purpose, they are inherently non-random in nature with outputs that can be reproduced if the initial seed is known. In contrast, hardware-based true random number generators (TRNGs) use natural phenomena (e.g., thermal noise) to produce outputs that can be truly random, thus enabling superior encryption. The emerging Internet of Things would thus greatly benefit from the enhanced security of integrated TRNGs.1, 2, 6 Portable networked devices further require small-scale and low-cost security hardware components. In addition, emerging wearable technologies often demand low-power computing elements that are ultra-thin and mechanically flexible.7, 8 As a result, existing hardware-based TRNG implementations based on conventional rigid semiconductor substrates and processing methods have found limited utility in flexible electronics applications. For example, optical TRNGs require integrated lasers, photon detectors, and substantial computational overhead to generate random bit streams.9-11 Similarly, small-scale TRNGs based on crystalline semiconductors are not inherently flexible and require expensive processing.12,

13

In contrast,

semiconducting single-walled carbon nanotubes (SWCNTs) are promising candidates for nextgeneration security devices due to their solution-processability, chemical stability, and superlative electronic properties.14-16 With these attributes, semiconducting SWCNTs have been successfully employed in a series of high-performance,17,

18

printed,19,

20

and/or flexible electronic

applications.17, 21 To date, SWCNT-based security device demonstrations have been limited to 3   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

physically unclonable functions (PUFs) that create static, chip-unique cryptographic keys.22 However, in contrast to TRNGs, the demonstrated PUFs are unable to perform critical tasks commonly used in encryption protocols, such as dynamically generating secure keys, cryptographic nonces, and random padding bits. Here, we demonstrate the first TRNG based on a solution-processed semiconductor by employing low-power, complementary SWCNT static random access memory (SRAM) cells.23 This approach requires minimal computational overhead to produce highly random bit streams as confirmed through a series of rigorous tests including the National Institute of Standards and Technology (NIST) randomness statistical test suite (STS)24 and the TestU01 battery tests.25 This work thus presents a promising methodology for improving security in the rapidly growing global network of interconnected electronic and sensing devices. Previous SWCNT thin-film transistor (TFT) efforts have resulted in the realization of complex complementary circuits, such as SRAM cells, with reliable operation and performance.23, 26 Building from that precedent, Figures 1a and 1b show an optical micrograph of a SWCNT TFT-based complementary SRAM cell and its corresponding circuit-level diagram, respectively. The SRAM cell is composed of two p-type (highlighted orange) and two n-type ഥ) (highlighted green) TFTs that correspond to two cross-coupled inverters with output (Q and Q and supply (VDD and GND) terminals. Two access p-type TFTs (highlighted blue) are controlled through the wordline (WL) terminal and tie the bitline (BL and തതതത BL) terminals with the inverter output terminals. A TFT channel length of 20 μm and a 2:1 width ratio (300 μm:150 μm) between the p-type pull-up and n-type pull-down TFTs are used to achieve optimal performance. The SRAM cell arrays were fabricated using previously reported methods.26-28 As can be seen in the cross-sectional schematic of a SWCNT TFT shown in Figure 1c, the fabricated devices employ a local backgate geometry with sorted, semiconducting SWCNTs (99% purity) as 4   ACS Paragon Plus Environment

Page 4 of 18

Page 5 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

the semiconducting channel. As shown by atomic force microscopy in Figure 1d, the SWCNT channel exhibits a random network morphology with a linear density of approximately 10 SWCNTs/μm. After doping the semiconducting channel, a 50 nm Al2O3 encapsulation layer is deposited to ensure dopant stability and thus long device lifetime under ambient conditions. All of the fabrication steps can be performed on polymer substrates,29-31 enabling SRAM fabrication for mechanically flexible applications. Additional fabrication details are summarized in the Supporting Information. In a typical SRAM cell, a single bit is stored within the cross-coupled inverters while power is supplied. When the wordline access transistors are turned on, the bitlines are used to perform read or write operations on the stored bit. However, when power is initially supplied to an SRAM cell, its binary memory state is unknown because symmetry of its cross-coupled inverters leads to a metastable state. This metastability is resolved when thermal noise fluctuations in the transistors drive the system into a stable “0” or “1” voltage level, leading to digitization of the thermal fluctuations. We leverage this digitization of inherently random physical noise to generate a sequence of truly random bits. Figure 2a summarizes how SRAM cells are operated as TRNGs using this principle. During the initialization step, wordline access p-type transistors are turned on (WL = 0 V), both bitlines are biased to VDD (BL = തതതത BL = 1.5 V), and the cross-coupled inverters are powered off (GND = VDD = 1.5 V). In the resolve step of an initialized cell, power is supplied to its cross-coupled inverters (GND = 0 V) while wordline access transistors are turned off (WL = ഥ ) to be randomly driven toward a VDD = 1.5 V), causing the output of each inverter (Q and Q stable complementary binary state by thermal noise fluctuations. A sample output of the resulting ഥ are both in a high state SRAM cell bit generation is shown in Figure 2b. As expected, Q and Q during the initialization step, but exhibit complementary behavior during the resolve step. The measured voltage output of Q during each resolve step is then translated into a binary bit (i.e., 5   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

high voltage = ‘1’; low voltage = ‘0’). Because the WL and GND voltage inputs act like complementary clock signals, this approach allows multiple SRAM cells to be operated synchronously,32 enabling scalable bit generation throughput. Further testing details are provided in the Supporting Information. Figure 3a shows a representative sample (136 initialization and resolve steps) of WL and Q voltages for a simulated (top) and measured (bottom) SRAM cell operating as a TRNG with a skew towards a logical high state of Q. In particular, a voltage offset between BL and തതതത BL is chosen such that Q resolves to a logical high state for ~95% of the generated bits. On the other തതതത hand, Figure 3b shows simulated and measured outputs for the same SRAM cell with a BL-BL voltage offset such that it operates with no skew (i.e., a fair and balanced distribution). These results exhibit good agreement between simulation and experiment, confirming the validity of the circuit modeling. Further details regarding how annealing affects TRNG performance and how to control TRNG skew can be found in the Supporting Information and prior literature.26 Using this experimental procedure, a total of 61,376 bits were collected from multiple തതതത voltage offsets were chosen for each SRAM cell to SRAM cells. For this bit stream, the BL-BL maximize the randomness of the post-processed output using the well-established von Neumann algorithm.33 The von Neumann algorithm was chosen since it can be easily implemented in hardware and is widely used in traditional TRNGs. Importantly, the SWCNT SRAM cell requires no additional post-processing or active feedback to be implemented as a TRNG. Further details on bit collection are shown in Table S1 of the Supporting Information. To visualize the effectiveness of this random bit generation and post-processing scheme, Figure 3c shows 75 × 75 bitmaps for sample raw (left) and post-processed (right) bit sequences. The bitmaps are created by populating two 75 × 75 matrices in reading order (left-to-right, top-tobottom) with their corresponding bit sequences, where each element in the array corresponds to a 6   ACS Paragon Plus Environment

Page 6 of 18

Page 7 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

pixel, and the value of the pixel indicates its color (‘0’ corresponds to white, ‘1’ corresponds to blue or green). While the bitmap for the raw data is skewed and contains long streaks, no identifiable patterns can be distinguished in the post-processed data bitmap, qualitatively suggesting a high degree of randomness. For a more quantitative assessment of randomness, a histogram of binned data can be compared with the expected theoretical distribution for a random bit sequence. All of the postprocessed bits (“Balanced”) and a representative sample of raw bits of equal length (“Skewed”) are divided into 20-bit segments. The segments are then binned according to the average bit values of their constituent bits. The histograms in Figure 3d represent the frequency of bit values for each corresponding data set. Because a truly random bit sequence is equivalent to the sequence of independent Bernoulli trials for a fair coin, we compare our results with an appropriately scaled binomial probability density function (“Binomial”). The post-processed bit sequence closely matches the expected binomial distribution, again suggesting a high degree of randomness, whereas the raw bit sequence shows a higher mean and lower standard deviation than expected. To further quantify the level of randomness, the post-processed bit stream was subjected to the National Institute of Standards and Technology (NIST) randomness statistical test suite (STS).24 For statistically significant results, the post-processed bit stream was divided into 56 sequences (i.e., the tests were performed 56 times on individual 1096-bit long sequences). Figure 4 shows the results from four of the NIST STS randomness tests. In the frequency test, bits are assigned a value of +1 or -1, and cumulative sums are calculated for each sequence. Figure 4a illustrates the frequency test, where individual plot lines correspond to the running sums of the sequences tested. Evidently, the plot lines are clustered within the expected region for a random sequence.

7   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

We further tested for randomness with the longest run of ones in a block test, which partitions the bit sequence into M-bit blocks, determines the length of the longest consecutive run of “1” bits in each block (“Balanced”), and compares the resulting run occurrences with what would be expected from a random sequence (“Expected”). Figure 4b shows the results of this test using a block size of M = 8 bits. The bar height and superimposed error bars represent the average and standard deviation of the results, respectively, for the 56 sequences tested. The experimental results again show clear agreement with the expectations for a random sequence. A balanced sequence can still fail to be random if the output is skewed towards specific m-bit patterns. Thus, the serial test counts the frequency of all possible overlapping 2m m-bit patterns in a sequence. Figure 4c illustrates the results of the serial test using m = 4 bits. The expected results for a random sequence, which has a uniform distribution, are also plotted in Figure 4c and confirm that the experimental bit stream passes the serial test of randomness. To expose possible periodic features, the spectral output of the discrete fast Fourier transform (FFT) test is shown in Figure 4d. The FFT test calculates the percentage of sequence peak values below the 95% peak value threshold expected for a random sequence. Periodic components are likely to be present if the calculated percentage significantly deviates from 95%. Each plot line corresponds to a sequence, and the percentages on the right of the figure indicate the proportion of peaks below or above threshold. The experimental value of 94.99% agrees well with the 95% expectation for a truly random sequence. Equivalent figures using sample raw data (Figure S1) and further details on the NIST tests are provided in the Supporting Information. The full results of the NIST STS randomness tests are summarized in Table 1. In all cases, the post-processed bit stream is found to be random.24 As an additional check, the postprocessed bit stream was further examined and affirmed to be random by the Rabbit and Alphabit tests from the Test U01 software suite25 (Table S2). Overall, these results show that appropriately 8   ACS Paragon Plus Environment

Page 8 of 18

Page 9 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

designed and biased SWCNT SRAM cells produce highly random bit streams and thus serve as effective TRNGs. In conclusion, we have demonstrated a TRNG using SRAM cells based on solutionprocessed semiconducting SWCNTs. By appropriately biasing the SRAM cells into a metastable state, thermal noise fluctuations are digitized to generate random bit streams. The demonstrated bit generation and post-processing strategy can be readily implemented in hardware and requires minimal transistor and computational overhead. Furthermore, the randomness of the resulting bit stream was rigorously confirmed using a comprehensive panel of established statistical tests. By using solution-processed SWCNTs and circuit architectures that are compatible with large-scale manufacturing methods, this work provides a pathway for the development of low-cost, ultrathin, and mechanically flexible security devices that can be adopted in next-generation portable and wearable electronics.

9   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Figure 1. SWCNT complementary SRAM cell. (a) Optical micrograph of a fabricated SWCNT complementary SRAM cell, showing labeled contact terminals, p-type inverter pull-up TFTs (orange), n-type inverter pull-down TFTs (green), and bitline access TFTs (blue). (b) Corresponding circuit-level diagram of the SRAM cell shown in part (a). (c) Cross-sectional diagram of a SWCNT TFT fabricated using a semiconducting SWCNT channel, p-type or n-type dopant layer, and Al2O3 encapsulation layer. (d) Atomic force microscopy image of the SWCNT channel showing a random network morphology.

10   ACS Paragon Plus Environment

Page 10 of 18

Page 11 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

Figure 2. SRAM operation as a bit generator. (a) Gate-level diagram showing SRAM cell biases during the initialization and resolve steps of bit generation. When the wordline access transistors are turned off and the power to the cross-coupled inverters is turned on, the inverter outputs (Q ഥ ) resolve to a complementary binary state dependent on thermal noise fluctuations. The and Q third terminal in each inverter represents the GND supply terminal. (b) Sample input (WL) and ഥ ) voltages for multiple initialization/resolve steps. The stable analog output output (Q and Q voltage level during each resolve step is interpreted into a single bit, resulting in complementary ഥ. bit sequences for Q and Q

11   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Figure 3. TRNG output control and initial randomness testing. (a) Simulated (top) and measured തതതത voltage offset (bottom) output from an SRAM cell functioning as a TRNG where the BL-BL creates a skew towards a logical high state for Q. (b) Simulated (top) and measured (bottom) തതതത voltage offset such that it operates output from the same SRAM cell as in part a but with a BL-BL with minimal skew. (c) Bitmaps for sample raw, skewed (blue) and post-processed, balanced (green) bit streams are created by populating two 75 × 75 matrices in reading order (left-to-right, top-to-bottom) with their corresponding bit sequences. A white or colored bit corresponds to a ‘0’ or ‘1’ bit, respectively. (d) Histograms of average bit values when the raw (“Skewed”) and balanced (“Balanced”) bit streams are divided into 20-bit segments. The expected binomial probability distribution function is also shown for comparison.

12   ACS Paragon Plus Environment

Page 12 of 18

Page 13 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

Figure 4. NIST STS randomness testing on balanced bits. (a) Illustration of the frequency test, where bits are assigned values of -1 or +1 and each plot line represents the cumulative sum of each bit sequence. The highlighted range represents passing sum values. (b) Illustration of the longest run of ones test, where the lengths of the longest consecutive runs of “1” bits of M-bit blocks in the sequences are counted. The error bars represent the standard deviation of the sequences tested. The expected distribution for a random sequence (“Expected”) is also shown. (c) Illustration of the serial test, which calculates the frequency of m-bit patterns in a sequence. The expected uniform distribution for a random bit sequence is also shown. (d) Illustration of the fast Fourier transform (FFT) test, showing the spectra for all sequences tested. A random bit sequence is expected to have 95% of its peaks below the indicated threshold. 

13   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Page 14 of 18

Table 1. Summary of NIST STS Results NIST statistical testa

p-value

proportion

resultb

Frequency

0.007694

56/56

PASS

Block Frequency

0.350485

56/56

PASS

Cumulative Sums

0.153763

56/56

PASS

Runs

0.085587

53/56

PASS

Longest Run of Ones

0.935716

56/56

PASS

Rank

0.956003

1/1

PASS

Discrete Fourier Transform

0.002374

55/56

PASS

Approximate Entropy

0.236810

54/56

PASS

Serial

0.455937

56/56

PASS

a

With the exception of the Rank test, these tests were performed using 56 sequences of 1,096 bits each, such that only the first 61,376 collected bits were tested.

b

A p-value > 0.001 and a proportion > 53/56 are required for a test to pass.

Supporting Information. Methods; SWCNT SRAM TRNG skew control; table of bits collected from SWCNT SRAM devices following post-processing; brief overview of select NIST statistical tests; table of TestU01 results; figures of NIST STS randomness testing on a representative sample of raw bits.

Acknowledgments. This work was supported by the Office of Naval Research MURI Program (N00014-11-1-0690) and the National Science Foundation (DMR-1121262 and CCF-0845605). A National Science Foundation Graduate Research Fellowship (W.A.G.R.), and a NASA Space Technology Research Fellowship (J.J.M.) are also acknowledged. The device fabrication was performed at the NUFAB clean room facility at Northwestern University. 14   ACS Paragon Plus Environment

Page 15 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

  Author Information. Correspondence should be addressed to M.C.H. ([email protected]).   Conflict of Interest Disclosure. The authors declare no competing financial interest.

References 1.

Guidelines for Smart Grid Cybersecurity; National Institute of Standards and

Technology: 2014. 2.

Voas, E. B. NIST Special Publication 800-183, 2016.

3.

Barker, E. B.; Roginsky, A. NIST Special Publication 800-133, 2010, 1-26.

4.

Eastlake, D. E.; Schiller, J. I.; Crocker, S. Randomness Requirements for Security; BCP

106, RFC 4086: 2005. 5.

Schneier, B., Applied Cryptography (2Nd Ed.): Protocols, Algorithms, and Source Code

in C. John Wiley & Sons, Inc.: New York, NY, USA, 1995. 6.

International Technology Roadmap for Semiconductors - Beyond CMOS; Semiconductor

Industry Association: 2015. 7.

Nathan, A.; Ahnood, A.; Cole, M. T.; Lee, S.; Suzuki, Y.; Hiralal, P.; Bonaccorso, F.;

Hasan, T.; Garcia-Gancedo, L.; Dyadyusha, A.; Haque, S.; Andrew, P.; Hofmann, S.; Moultrie, J.; Chu, D.; Flewitt, A. J.; Ferrari, A. C.; Kelly, M. J.; Robertson, J.; Amaratunga, G. A. J.; Milne, W. I. Proc. IEEE 2012, 100, 1486-1517. 8.

Khan, S.; Lorenzelli, L.; Dahiya, R. S. IEEE Sens. J. 2015, 15, 3164-3185.

15   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

9.

Uchida, A.; Amano, K.; Inoue, M.; Hirano, K.; Naito, S.; Someya, H.; Oowada, I.;

Kurashige, T.; Shiki, M.; Yoshimori, S.; Yoshimura, K.; Davis, P. Nat. Photon. 2008, 2, 728-732. 10.

Kanter, I.; Aviad, Y.; Reidler, I.; Cohen, E.; Rosenbluh, M. Nat. Photon. 2010, 4, 58-61.

11.

Reidler, I.; Aviad, Y.; Rosenbluh, M.; Kanter, I. Phys. Rev. Lett. 2009, 103, 1-4.

12.

Petrie, C. S.; Alvin Connelly, J. IEEE Trans. Circuits Syst. I Fundam. Theory Appl. 2000,

47, 615-621. 13.

Bucci, M.; Germani, L.; Luzzi, R.; Trifiletti, A.; Varanonuovo, M. IEEE Trans. Comput.

2003, 52, 403-409. 14.

Tulevski, G. S.; Franklin, A. D.; Frank, D.; Lobez, J. M.; Cao, Q.; Park, H.; Afzali, A.;

Han, S. J.; Hannon, J. B.; Haensch, W. ACS Nano 2014, 8, 8730-8745. 15.

De Volder, M. F. L.; Tawfick, S. H.; Baughman, R. H.; Hart, A. J. Science 2013, 339,

535-539. 16.

Ha, M.; Seo, J. W. T.; Prabhumirashi, P. L.; Zhang, W.; Geier, M. L.; Renn, M. J.; Kim,

C. H.; Hersam, M. C.; Frisbie, C. D. Nano Lett. 2013, 13, 954-960. 17.

Rogers, J. A.; Someya, T.; Huang, Y. Science 2010, 327, 1603-1607.

18.

Franklin, A. D. Nature 2013, 498, 443-444.

19.

Ha, M.; Xia, Y.; Green, A. A.; Zhang, W.; Renn, M. J.; Kim, C. H.; Hersam, M. C.;

Frisbie, C. D. ACS Nano 2010, 4, 4388-4395. 20.

Kim, B.; Park, J.; Geier, M. L.; Hersam, M. C.; Dodabalapur, A. ACS Appl. Mater.

Interfaces 2015, 7, 12009-12014.

16   ACS Paragon Plus Environment

Page 16 of 18

Page 17 of 18

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

Nano Letters

21.

Cao, Q.; Kim, H.-S.; Pimparkar, N.; Kulkarni, J. P.; Wang, C.; Shim, M.; Roy, K.; Alam,

M.; Rogers, J. Nature 2008, 454, 495-500. 22.

Hu, Z.; Comeras, J. M.; Park, H.; Tang, J.; Afzali, A.; Tulevski, G. S.; Hannon, J. B.;

Liehr, M.; Han, S. J. Nat. Nanotechnol. 2016, 11, 559-565. 23.

Geier, M. L.; McMorrow, J. J.; Xu, W.; Zhu, J.; Kim, C. H.; Marks, T. J.; Hersam, M. C.

Nat. Nanotechnol. 2015, 10, 944-948. 24.

Rukhin, A.; Soto, J.; Nechvatal, J.; Miles, S.; Barker, E.; Leigh, S.; Levenson, M.;

Vangel, M.; Banks, D.; Heckert, A.; Dray, J.; Vo, S. NIST Special Publication 800-22 Revision 1a, 2010. 25.

L'Ecuyer, P.; Simard, R. ACM Trans. Math. Softw. 2007, 33, 22.

26.

Geier, M. L.; Prabhumirashi, P. L.; McMorrow, J. J.; Xu, W.; Seo, J. W. T.; Everaerts,

K.; Kim, C. H.; Marks, T. J.; Hersam, M. C. Nano Lett. 2013, 13, 4810-4814. 27.

Kim, S. M.; Jang, J. H.; Kim, K. K.; Park, H. K.; Bae, J. J.; Yu, W. J.; Lee, I. H.; Kim,

G.; Loc, D. D.; Kim, U. J.; Lee, E.-H.; Shin, H.-J.; Choi, J.-Y.; Lee, Y. H. J. Am. Chem. Soc. 2009, 131, 327-331. 28.

Lee, S. Y.; Lee, S. W.; Kim, S. M.; Yu, W. J.; Jo, Y. W.; Lee, Y. H. ACS Nano 2011, 5,

2369-2375. 29.

Kim, B.; Jang, S.; Geier, M. L.; Prabhumirashi, P. L.; Hersam, M. C.; Dodabalapur, A.

Nano Lett. 2014, 14, 3683-3687. 30.

Kim, B.; Geier, M. L.; Hersam, M. C.; Dodabalapur, A. ACS Appl. Mater. Interfaces

2015, 7, 27654-27660.

17   ACS Paragon Plus Environment

Nano Letters

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60

31.

Kim, B.; Geier, M. L.; Hersam, M. C.; Dodabalapur, A. IEEE Electron Device Lett. 2014,

35, 1245-1247. 32.

Guajardo, J.; Kumar, S. S.; Schrijen, G.-J.; Tuyls, P. Lect. Notes Comput. Sci. 2007,

4727, 63-80. 33.

Von Neumann, J. Nat. Bur. Stand., Appl. Math Ser. 1951, 12, 36-38.

18   ACS Paragon Plus Environment

Page 18 of 18