Imagine you need to verify someone's identity, but they have no ID card — just their fingerprint. Now imagine the fingerprint smudges differently every time you press it, and the scanner was never designed for biometrics. That's the core problem of software PUFs: extracting a stable, unique device identity from analog quirks (SRAM power-up states, DRAM decay patterns, flash read noise) using only the software interfaces already available on shipped hardware. No chip redesign, no new silicon — just clever measurement of what the manufacturing process left behind. The committed claim here is organizational, not experimental: this is the first survey that systematically compares 37 software PUF works against the specific requirements of edge AI model protection — boot-time key derivation versus runtime key derivation, and the latency budgets each imposes. That distinction matters because protecting an AI model at boot is a one-shot ceremony (seconds are tolerable), while runtime re-authentication during inference demands sub-millisecond responses that most current software PUFs cannot deliver. The taxonomy is useful. The authors classify entropy sources into five families: SRAM, DRAM, flash memory, CPU/cache timing, and mixed/hybrid. Each family exposes different analog phenomena — SRAM gives you power-up bit preferences, DRAM gives you retention-time decay, flash gives you threshold voltage drift, CPU timing gives you microarchitectural jitter. The survey then maps each source against four PUF quality metrics: uniqueness (inter-device Hamming distance ≈ 50% ideal), reliability (intra-device stability across temperature/voltage/aging), bit rate (how many key bits per measurement cycle), and latency. No single entropy source dominates on all four axes — SRAM is fast but low-entropy-per-bit; DRAM retention PUFs are high-entropy but painfully slow (seconds of controlled decay); flash PUFs degrade with program/erase wear. The paper identifies four open challenges that are genuinely load-bearing for the field. First, aging drift: analog characteristics shift over the multi-year lifespans of edge devices, and no current software PUF has demonstrated stable key derivation across 5+ years of real deployment. Second, environmental sensitivity: temperature and voltage swings cause bit-flip rates that overwhelm lightweight fuzzy extractors. Third, latency: the gap between boot-time PUFs (acceptable at 100ms–1s) and runtime PUFs (needed at <1ms for inference-time model protection) remains wide open. Fourth, adversarial robustness: side-channel and machine-learning-based modeling attacks specifically targeting software PUF challenge-response pairs are advancing faster than defenses. What's missing is original experimentation. This is a survey, not a benchmark paper. The authors do not run any of the 37 schemes on common hardware, do not produce head-to-head measurements, and do not release code or datasets. The comparative analysis relies entirely on numbers reported in the original papers — each measured under different conditions, on different devices, with different metrics. This is honest about its scope but limits what you can conclude about relative performance. The practical implication for edge AI security teams is clear: if you're deploying models on already-manufactured MCUs or SoCs and need a device-bound key without a TPM or secure enclave, software PUFs are the only game in town. But you're choosing between entropy sources with fundamentally different latency-reliability trade-off curves, and none of them are production-ready for runtime key derivation during inference. Boot-time protection is achievable today with SRAM PUFs on many ARM Cortex-M platforms; runtime protection at inference speed is a research problem, not an engineering problem. The survey is a useful map for anyone entering this space. It won't change the field's direction, but it consolidates a fragmented literature into a decision framework that practitioners can actually use. The four-challenge taxonomy gives the community specific targets rather than vague 'future work' hand-waving. For a venue paper (AsianHOST 2026), this is solid organizational work with clear practical value.
