Nanoscale physical unclonable function labels based on block copolymer self-assembly

Hardware-based cryptography that exploits physical unclonable functions is required for the secure identification and authentication of devices in the Internet of Things. However, physical unclonable functions are typically based on anticounterfeit identifiers created from randomized microscale patterns or non-predictable fluctuations of electrical response in semiconductor devices, and the validation of an encrypted signature relies on a single-purpose method such as microscopy or electrical measurement. Here we report nanoscale physical unclonable function labels that exploit non-deterministic molecular self-assembly. The labels are created from the multilayer superpositions of metallic nanopatterns replicated from self-assembled block copolymer nanotemplates. Due to the nanoscale dimensions and diverse material options of the system, physical unclonable functions are intrinsically difficult to replicate, robust for authentication and resistant to external disturbance. Multiple, independently operating keys—which use electrical resistance, optical dichroism or Raman signals—can be generated from a single physical unclonable function, offering millisecond-level validation speeds. We also show that our physical unclonable function labels can be used on a range of different surfaces including dollar bills, human hair and microscopic bacteria. Nanoscale physical unclonable function labels that offer multiple, independently operating keys and can be used for high-speed multipurpose identification can be created by exploiting the non-deterministic molecular self-assembly of block copolymers.


Multipurpose nanoPUF label generation
Biological vein networks are a complex biological medium with non-predictable connectivity and randomized length scales and are useful for high-security authentication ( Fig. 1a) 29,30 . The distinctive geometric features of a vein network are hidden under human skin, yet they offer an important method of biometrics, eligible for secure authentication using a near-infrared laser. Protection and anticounterfeiting of assets that require high security, such as the banknote, can be achieved by introducing vein-like PUFs, allowing high-speed authentication by optical or electrical detection (Fig. 1b). Such a bioinspired PUF can be created via the multilayer superposition of metallic nanopatterns replicated from BCP nanotemplates 27,28 , which are formed by a non-deterministic selfassembly process relying on well-established microphase separation mechanisms 23,24,31 (Fig. 1c and Methods).
Nanoscale pattern dimensions are beyond typical optical resolution limits, and thus, the straightforward morphological validation of a nanoPUF label requires tedious microscopic scanning, such as scanning electron microscopy (SEM) or atomic force microscopy 32,33 . These time-consuming validation tools limit the potential practicality of an authentication system. Thus, our nanoPUFs, Nanoscale physical unclonable function labels based on block copolymer self-assembly which are composed of nanostructured metals, respond to various physical stimuli-including electrical potential and polarized visible light-that can be used for effective validation within milliseconds and generating multiple unpredictable keys from an identical nanoPUF (Fig. 1d). These keys are encrypted through physically independent mechanisms-electrical resistance (electrical key, key 1), optical dichroism (dichroism key, key 2) and Raman scattering (Raman key, key 3)-enabling mutually independent authentication routes. Users are free to choose one of the authentication methods according to a demanded specific purpose. Furthermore, multilevel authentication with a high-security rate is possible through a combination of two or more independent authentication keys. Multilayer stacking of BCP nanopatterns offers advantages for authentication labels. A monolayer BCP pattern provides a randomized fingerprint-like pattern with a unique length scale of lamellar period and localized orientation correlation among the neighbouring lamellae. More complex and less predictable interconnected nanopatterns can be generated via transfer printing of metallic nanopatterns, which can be overlaid several times (Fig. 1e). We theoretically calculated the two-dimensional (2D) information entropy and the orientational correlation length of the generated nanopatterns (Fig. 1f, Methods and Extended Data Fig. 1). A sample information entropy of a 2D matrix of continuous pixel values is employed, whereas the Hausdorff dimension of the 2D matrix is calculated for fractal dimension. As expected, the information entropy (pattern complexity) increases with the stacking number along with the reduction in orientational correlation length (local orientation). Multilayer stacking also allows the relatively narrow distribution of the order parameters over an arbitrarily large PUF label area. Small standard deviations for the spatial distribution of 2D information entropy (S) verify the uniform level of complexity yet fully non-predictable randomized pattern formation over the broad patterned area (Methods and Extended Data Fig. 1).
A further advantage of multilayer stacking is the reliable responsivity of the nanoPUF to physical validation methods, including electrical measurement and Raman scattering, where the formation of unpredictable conductive pathways or small nanogaps below the original lamellar period are crucial for the unpredictable signal generation. The resultant encoding capacity depends on the number of challenge-response pairs (CRPs) obtainable either from a single encryption method or a combination of several encryption methods (Methods and Fig. 1g). For example, a single key consists of a 15-bit CRP space in this work, subsequently yielding the key space of 2 15 (Methods). Thus, the integration of only two independent validation methods can provide multibillions of key space, comparable to the worldwide population (almost 8.0 × 10 9 ). Moreover, the integration of all three methods provides an extremely large key space approaching 3.3 × 10 13 (Methods). The overall encoding capacity can also be further improved by increasing the size of the CRP space for each key (inversely proportional to the pixel area for patterned measurements). Figure 2a illustrates the challenge-response authentication process for a nanoPUF. In the initial challenge generation step (green dashed line), arbitrary challenges are introduced into the processing unit of each method. Electrical potential, polarization angle of incident light and light exposure time are set as the typical challenges for the electrical, dichroism and Raman keys, respectively, whereas 15 strings of challenges are sequentially applied to a nanoPUF (typically, 200 μm is the distance between the electrodes for the electrical key, and 50.00 × 50.00 μm 2 and 0.75 × 0.75 μm 2 are the pixel sizes for the dichroism and Raman keys, respectively). In the next identification generation step (blue dashed line), the nanoPUF acts as a random number generator through unique interaction with the challenges. Subsequent digitalization is performed based on the comparison with arbitrarily set threshold values to yield 15 response bits. Final authentication (red dashed line) is carried out by comparing and evaluating the keys with preset databases.

Operation of multipurpose key generation
One of the effective key generation methods from a nanoPUF relies on the generation of randomized patterns in electrical conductivity (Fig. 2b). A randomized electrical current response is expected depending on the output location even if an electrical potential is applied through an identical pair of electrodes in the nanoPUF. The electrical current is delivered through a randomized Kirchhoff resistance network composed of unpredictable combinations of conducting routes 34 (Fig. 2c). For a reliable measurement of the randomized signals without concerning the influence from measurement errors or noise, a reference electrode was fabricated on a non-patterned metal film, over which the current distribution was carefully confirmed. As shown in Fig. 2d, the reference (bare thin metal film) exhibits nearly no fluctuation in the electrical resistance level (less than the milliohm scale), whereas four randomly selected nanoPUF samples reveal considerably large fluctuations over the scale of tens of ohms. These unique output values can be transformed into binary signals (namely, barcodes or QR codes) by introducing a predetermined threshold current value (Fig. 2e, Methods and Extended Data Fig. 2).
Another method for key generation exploits the inherent optical dichroism of the nanoPUF pattern. It is well known that a subwavelength-scale metallic nanowire pattern exhibits strong optical dichroism depending on the incident wavelength and polarization 35 . This dichroism is principally determined by the local anisotropy in the in-plane orientation of nanowires, as verified by a simulation study (Fig. 2f) (Methods and Extended Data Fig. 3). Indeed, a nanoPUF formed on a quartz substrate presents a distinctive linear dichroism with polarization-selective transmission of incident light (Fig. 2g), leading to a unique intensity distribution of reflectance for a polarized incidence beam (Extended Data Fig. 4). For practical key generation, we randomly selected a 15-point set and compared the intensity distribution of the reflectance (linearly polarized light with a wavelength of 633 nm) with respect to a predetermined threshold value (Methods and Extended Data Fig. 5).
Our third method of key generation utilizes the intensity distribution of Raman scattering from a nanoPUF. Plasmonic materials with nanoscale features, including gaps, crevices or sharp geometry, induce a strong amplification of incident light, caused by the localized surface plasmon resonance, to yield signature patterns of Raman scattering intensity 36,37 (Fig. 2h). A unique plasmonic resonance is expected depending on the local angle between the stacked metal nanowires in our nanoPUF. Randomly occurring lateral gaps between the nanowires in different stacking layers are principally responsible for the enhancement in the Raman signal due to the smaller gap sizes compared with the original lamellar period (Fig. 2i, Methods and Extended Data Fig. 6). Raman keys can be readily generated by measuring the scattering intensities at the selected 15-point sets and the subsequent comparison with a threshold (Extended Data Figs. 3 and 7).
We have performed a quantitative statistical analysis of important PUF security parameters based on the experimental characterization, including uniqueness, bit aliasing and reliability 38,39 (Table 1 and Methods). Here 12 PUF cores are fabricated with 15 digital strings for each key generation. All the different key generation schemes introduced in this work exhibit nearly ideal uniqueness (that is, mean values for the measured responses of μ Electrical = 41.90%, μ Dichroism = 43.66%, μ Raman = 50.61% and μ Integrated = 45.39%), confirming that each nanoPUF is well distinguishable from others for all the different validation mechanisms. The mean values for bit aliasing are sufficient to avoid similar responses from different PUF labels (that is, μ Electric = 28.75%, μ Dichroism = 32.81%, μ Raman = 46.11% and μ Integrated = 35.89%). For reliability, the mean values (μ Electrical = 99.48%, μ Dichroism = 99.69%, μ Raman = 98.33% and μ Integrated = 99.15%) are close to the ideal value (100%) to guarantee that a nanoPUF core can reproduce the same response bits under the same validation condition in a robust way. Furthermore, not only high-speed authentication is possible as a given nanoPUF generates multiple keys but high accessibility is also attainable by the unique response even with a macroscale identification resolution. Besides, it is possible to further enhance the encoding capacity by increasing the number of measurement set points for the bit generation.
Our experiment considers a simple case with six electrodes in electrical measurement or 15 points in optical and Raman measurement for the proof-of-concept realization of a nanoPUF. The size of the CRP space can be easily enlarged for our nanoPUF. For instance, in the electrical method, 25 electrodes with the typical width and space down to 20 μm (centre-to-centre distance between the electrodes, 40 μm) can be readily fabricated on a single side of 1 mm × 1 mm PUF pattern by conventional photolithography, thereby incorporating a total of 100 electrodes at all the sides of a PUF pattern. For an exemplary case employing 50 μm width and space (centre-to-centre distance between the electrodes, 100 μm), ten electrodes on one side and a total of 40 electrodes can be generated over a 1 mm × 1 mm PUF. From the combination of 40-100 electrodes, 780 ( 40 C 2 )-4,950 ( 100 C 2 )-bit CRP space can be generated. On average, an approximately 2,000-bit CRP space can be easily generated solely for the electrical validation method.    Both optical dichroism and Raman-based validation methods can also provide vastly expanded CRP spaces. It is technically easy to prepare hundreds-or even thousands-of measurement pixels, as the typical spatial resolution of beam focusing is smaller than 10 μm. For the PUF area of 200 μm × 200 μm along with a spatial pixel resolution of 10 μm, we can generate a total of 400 pixels. It is possible to transform these 400 pixels into mutually independent one-dimensional (1D)-bit strings using several 2D-to-1D matrix transformation schemes, such as zigzag (that is, left or right, up or down), spiral (in or out, left or right) and spacefilling curves (that is, Hilbert curve, Gosper curve, Koch curve and so on). The total number of these schemes is approximately ten. Therefore, the CRP space for optical dichroism method can be extended up to at least 400 × 10 ≈ 4,000 bits. We suggest a similar manner for the Raman-based method to produce another 4,000-bit CRP space. As those three validation methods are mutually independent, it is possible to prepare an approximately 2,000 + 4,000 + 4,000 = 10,000-bit CRP space. This scale obviously satisfies the typical criterion for a strong PUF, as the total key space is ~2 10,000 (~10 3,010 ) to fulfil the requirements for a wide range of authentication purposes.

extreme high-security nanopattern identifiers
Apart from the interesting key generation mechanisms from various physical responses, the nanoscale morphology of a nanoPUF itself can be potentially utilized as a reliable nanoidentifier for authentication. The possible number of distinguishable nanoidentifiers with a single kind of defect structure within a 1 μm × 1 μm area can be calculated as 4.8 × 10 35 in our nanoPUF (Methods). Figure 3a presents that ten different nanoidentifiers exhibit sufficiently discernible responses to a single binary image challenge pattern based on a simple exclusive-OR (XOR) operation. Here 300 nanoidentifiers are identified (Supplementary Information) to yield a set of sufficiently different response patterns with the average Hamming distance (<μ>) close to 0.5 (that is, <μ> = 0.5007 ± 0.0545) ( Fig. 3b and Extended Data Fig. 8). This assures that a nanoPUF can serve as a unique security medium. Conversely, one nanopattern identifier can discriminate different challenges with the average Hamming distance close to 0.5 again (that is, <μ> = 0.4993 ± 0.0082) (Extended Data Fig. 8).
For an image-based nanoidentifier, noise robustness is a crucial requirement. As shown in Fig. 3c (Extended Data Fig. 8), although different threshold pixel values are set for the binarization of the greyscale image (that is, 50 different levels from 0.01 to 0.99), a nanoidentifier can provide distinguishable Hamming distance for a sufficiently wide range of thresholds, verifying safe and reliable authentication. Generally, random lamellar nanopatterns include topological defects, such as terminations and bifurcations (Fig. 3d). The unique distribution of such defects is compatible with the identification algorithm for fingerprint pattern recognition 40,41 . From a bilayer stack of BCP patterns, spatial coordinates of topological defects can be separately extracted from the top and bottom layers (Methods and Extended Data Fig. 9). Multilayer stacking also yields additional topological defects, such as crossing points. The digitalized images for terminations, bifurcations and crossing points are constructed with a designated pixel resolution. It is noteworthy that there are other types of structural defect that can also serve as independent identifiers, such as ridge island (or short ridge), dot, bridge, spur, eye (or enclosure), double bifurcation, delta, swirl, trifurcation and so on (Extended Data Fig. 10b). Therefore, at least 12 different groups with at least ten identifiers are present, which makes 120 bits for the nanoidentifier (that is, the CRP space for the nanoidentifier is ~120 bits). The estimated maximum code capacity of a single nanopattern layer is 5.32 × 10 81 . When two BCP layers are overlapped in this work, the maximum code capacity is 2.83 × 10 163 , which is a sufficiently large number for high-level security applications. Consequently, a nanoidentifier can serve as a unique encryption or authentication key solely based on topological defect distribution. Notably, recent progress in high-throughput nanoscale microscopy, including multitip parallel atomic force microscopy scanning, can be employed for rapid and highly secure authentication by exploiting the inherent high encoding capacity from miniaturized nanoscale features. Nonetheless, a thorough characterization of the entire nanoscale pattern must be avoided, as it significantly threatens the security of our PUF. In this regard, optically transparent adlayer formation above the surface of the nanoPUF can be suggested, which can prevent the direct contact of scanning probe or electron beam to the nanoscale pattern, whereas electrical or optical validation can still be functional.

Stability and application of nanoPUF labels
We have tested the stability and sustainability of the nanoPUF system under various environmental conditions. Practically, PUF labels are required to work on various types of material and geometry at the target surfaces. For long-term reliable operation, PUF labels are also required to be robust against external distur bances induced by undesired physical contacts. The mechanical robustness of a nanoPUF was evaluated by the repeated attaching and detaching of commercially available sticky tapes at the PUF label surfaces (Fig. 4a) for 30 cycles. Electrically generated keys from different samples show a high sustainability and fidelity of 85.93 ± 4.73% (Fig. 4b).
The original nanoscale geometry is also well maintained, as verified from the minimal changes in information entropy and fractal dimension. It is noteworthy that mechanical stability can be further improved by employing protective encapsulation. A thermal stability test was conducted under the harsh condition of 150 °C for 1 h (Fig. 4c). Electrically generated keys from different samples reveal the high thermal stability with a coincidence rate of 93.75 ± 6.25%, as the nanoscale security performance is well sustained (Fig. 4d). Figure 4e presents the versatile implementation of a nanoPUF at arbitrary target surfaces. NanoPUF labels are well integrated at the surface of a dollar bill for an anticounterfeit tag and also stabilized at the flexible polymeric surfaces and human skin for wearable or skin-attachable IoT devices. Taking advantage of the intrinsic small size and flexible thin geometry, nanoPUF labels are easily integrated onto arbitrary non-planar deformable surfaces as hidden labels. Interestingly, our high-precision miniature labels can be implemented onto unusually small objectives (Fig. 4f). A PUF label can make conformal contact at the high-curvature surface of a single strand of human hair (radius of curvature, ~80 μm). Furthermore, it can be stabilized for small living organisms, such as ants or even microscopic bacteria (~1 μm), for the unique identification of those organisms from their colonies.

Conclusions
We have shown that non-deterministic molecular self-assembly, which occurs under thermal fluctuation, can be used to create nanoscale PUF labels with secure characteristic dimensions and large encoding capacities. The approach provides reliable multipurpose authentication, including electrical and optical responses as cryptographic key generators, with fast validation speeds. Our technique downscales the critical dimensions of PUFs and could provide a generalized platform for advanced authentication systems, with potential use in, for example, hidden miniature identifiers on arbitrary surfaces or distributed multikey integrated authentication systems. The large range of material choices available with PUF labels is also potentially beneficial for ubiquitous labelling, even under harsh electromagnetic-pulse shock or invasive high-energy radiation. The seamless integration of our nanoPUF with the necessary validation tools would be a valuable next step and could lead to versatile applications including hardware-based on-demand cryptographic key generation.
Electrical current measurement. All the electrical characterizations were performed using a Keithley 4200A-SCS instrument. Every cell was applied to a voltage pulse under the same conditions repetitively: voltage amplitude, 1 V; rise and fall time, 1 µs; pulse width, 10 µs, time step, 20 ns; applied voltage, five times.
Polarized optical reflectivity measurement. A polarized optical microscope was developed to obtain the polarized reflectance map in a single shot. To capture the fine reflection features by local orientation, the microscope was equipped with an objective lens (MY10X-803, Thorlabs) and a tube lens for magnification. For polarized detection, the sample was illuminated with linearly polarized light with a wavelength of 633 nm (HeNe laser, Newport), and reflected light from the sample was detected by a complementary metal-oxide-semiconductor camera (DCC3240M, Thorlabs) with a linear polarizer (LPVISE100-A, Thorlabs); the polarization angles in both sides of the source and detector were matched. In the last step, the detected image was normalized by a silver mirror to constitute a polarized reflectance map.
Raman scattering measurement. Raman scattering of the fingerprint metal patterns was observed using a dispersive Raman spectrometer (ARAMIS, Horiba Jobin Yvon). Raman scattering measurements were operated with a 633 nm wavelength laser and 100 ms exposure time.
SEM measurement. Morphology of the self-assembled BCP films and fingerprint metal patterns were observed using SEM (S-4800, Hitachi). To enhance the image contrast and identify each layer of the multilayer stacked sample, SEM measurements were operated in 3 kV in the backscattered electron mode.
Non-deterministic nanopatterning by BCP self-assembly. BCPs and hydroxyl-terminated random copolymers were used as received without any purification. Surface energy of all the silicon oxide substrates was neutrally modified with the hydroxyl-terminated random copolymer brush treatment. Briefly, a neutral brush layer was spin casted from 1 wt% toluene solution onto a silicon substrate after ultraviolet ozone treatment. The substrates were thermally treated at 160 °C in a vacuum for 12 h and then rinsed with toluene to remove unreacted brush molecules. The PS-b-PMMA solution was prepared by blending two PS-b-PMMA BCPs (M n (the number average molecular weight) values of one set of PS and PMMA blocks, 105 and 106 kg mol −1 , respectively, and M n values of the other set of PS and PMMA blocks, 5 and 5 kg mol −1 , respectively) with a 7:3 weight ratio with toluene (total polymer concentration, 1.5 wt%). The BCP thin films were spin casted onto brush-treated silicon oxide and annealed under tetrahydrofuran vapour atmosphere for 1-2 h at room temperature.
Metal fingerprint nanopattern formation. For pattern transfer from BCP thin films onto metal nanopatterns, PMMA lamellar nanoscale domains in the BCP thin film were selectively etched by O 2 -plasma reactive ion etching, and the desired metal layer was electron-beam evaporated onto the entire substrate surface area with a deposition thickness of 10-20 nm, followed by a lift-off process under sonication.
Transfer printing of metal nanopatterns. A polydimethylsiloxane (PDMS) stamp film was prepared by blending SYLGARD 184 silicone elastomer and curing agent at a 10:1 weight ratio, followed by a crosslinking reaction under a vacuum at 60 °C for 6 h. To peel off the metal fingerprint pattern from the silicone oxide substrate onto the PDMS stamp, the underlying silicone oxide layer was etched by hydrogen fluoride vapour. The metal pattern stabilized at the PDMS surface was stamped at the desired substrates. Calculation of entropy of BCP self-assembled nanopatterns. Sample entropy. For the given data with length of N, U = [u(1) u (2) …u(N)], we can calculate the sample entropy with a sampling algorithm accompanied by embedding the dimension. For sampling, sample data X(i) with length m can be extracted as follows: Using X(i), we can calculate the certain information measure defined as where d[ X, X * ] denotes the scalar distance between the two data vectors X and X * and r is the threshold distance. Typically, r is set as r = 0.2σ, where σ denotes the standard deviation of the overall data. Using the statistical sampling measure C m i (r), we can calculate the variation rate of normalized information, C m i (r) /(N − m), and translate it into the sample entropy S SP as follows: ) . (2) The distribution of sample entropy of 50 bilayer PUF labels is shown in Extended Data Fig. 1.
LZ entropy. Lempel-Ziv (LZ) entropy relies on the calculation of LZ complexity 42 . For the calculation of LZ complexity, we converted the raw data into binary data with a threshold set as the overall average. With binary data, different combinations and its occurrence frequency can be translated into information complexity. When N is sufficiently large, it is known that C LZ approaches the Kolmogorov complexity. A detailed calculation algorithm for LZ complexity, C LZ , can be found elsewhere 42 . With this, we can calculate the LZ entropy S LZ as The distribution of LZ entropy of 50 bilayer PUF labels is shown in Extended Data Fig. 1.
Permutation entropy. The entropy of information can also be calculated by considering the relative occurrence frequency of the ordinal pattern. To calculate the ordinal pattern frequency, we can apply a sampling method using order number d and delay τ such that The sample data are coded with the inversion number, which denotes the possible permutation types. For example, X (2) i has 3! = 6 possible permutations, which provides six different inversion numbers for the code. The code can be systematically generated with the following relationship: With a fixed window length W, a vector containing the permutation code P with W components can be generated. For the kth window vector, we can count the occurrence frequency of certain permutation code p, q p (k). Using q p (k), we can calculate the permutation entropy S PE as The distribution of permutation entropy of 50 bilayer PUF labels is shown in Extended Data Fig. 1.

Conditional permutation entropy.
To correct the noise effects on information measure, permutation entropy can be further revised into empirical conditional permutation entropy S CD . This measure considers the delay effects on permutation entropy such that where p j,l (t) denotes the number of combinations with ordinal pattern code l of the sample data with delay τ, X (τ) t+τ = [x (t + τ) x (t + 2τ) …x (t + dτ + τ)], given the sample data X (τ) t = [x (t) x (t + τ) …x (t + dτ)], which has the ordinal pattern code j. The distribution of conditional permutation entropy of 50 bilayer PUF labels is shown in Extended Data Fig. 1. Calculation of fractal dimensions of BCP self-assembled nanopatterns. We employed generalized entropy at order q to measure the fractal dimension of self-assembled nanopatterns. First, the dimension spectrum D q can be defined as where M(r) denotes the number of hypercubes to cover the data or geometric patterns in the mth dimension with a unit hypercube with unit length r, N denotes the total number of signals or points in the data and N i is the total number of data points in the ith hypercube.
Capacity fractal dimension. In the case of q = 0, the dimension spectrum corresponds to the Kolmogorov capacity or Kolmogorov dimension, which is mathematically identical to the Hausdorff dimension and is expressed as The capacity fractal dimension is a typical fractal dimension (denoted as FD cap in the paper). The distribution of capacity fractal dimension of 50 bilayer PUF labels is shown in Extended Data Fig. 1.

Information fractal dimension.
In the case of q = 1, the dimension spectrum can be expressed as where the numerator in equation (8), namely, − pilogpi, is the Shannon entropy, and therefore, this fractal dimension corresponds to the information fractal dimension (denoted as FD inf in the paper).
Correlation fractal dimension. In the case of q = 2, the dimension spectrum can be expressed as log(r) , where H(x) is the Heaviside function and ρ(x i , x j ) is the Chebyshev distance between the two points x i and x j , which is defined as In equation (9), C(r) denotes the correlation function of the data points with distance r, and therefore, D 2 corresponds to the correlation fractal dimension (denoted as FD cor in the paper).

Calculation of orientational order and correlation of self-assembled patterns.
We employed a quantitative algorithm for evaluating the local orientation of self-assembled patterns in BCP thin films based on the principal components analysis algorithm. This algorithm analyses the local orientation of each pixel in the noise-processed greyscale electron microscopy images by calculating the local gradient vectors and their maximum likelihood to determine the governing orientation vector 43 . The local orientation can be represented by local orientation angle θ′, which can be rewritten as the degree of angular deviation from the average angle 〈θ′〉 such that θ = θ′ − 〈θ′〉. Using θ, we calculated the pair correlation function of position-dependent local orientation 44,45 g(r) such that where r and r′ are the 2D position vectors of the pixels in the image and N denotes the total number of pixels in the images. From the statistical point of view, g(r) provides quantitative information on the spatial variation in the orientational order over a certain distance. Therefore, it is possible to obtain a characteristic length scale for the persistence of orientational order such as an orientational-order correlation length L corr , which corresponds to the smallest value of r satisfying g(r) = 0, where r = |r|. A plot of the correlation function with the number of overlapped layers is depicted in Extended Data Fig. 1.
Key generation process consisting of digital bits and encoding capacity calculation. Electrical key generation. At least six electrodes are fabricated on the PUF label, and two electrode pairs are selected to measure the electrical current. The number of combinatorial electrode pairs is 6 C 2 , a total of 15. By measuring the resistance value between the electrode pairs and comparing them with an arbitrarily set threshold value (for example, the average of the resistance value), digitalization that assigns 0 or 1 proceeds to generate 15 bits (Extended Data Fig.  2). Consequently, the size of the key space that can be generated with our 15-bit CPR is 2 15 from a single-PUF label.
Dichroism key generation. In dichroism key generation, the size of the CRP space can be assigned by dividing a reflectance map into multiple sections. As illustrated in Extended Data Fig. 4, the measured reflectance map of 200 μm × 200 μm is divided into 4 × 4 sections with each section size of 50 μm × 50 μm; 15 sections are selected among them. These patterned reflectance values can be multiplied by a normal distribution N(μ = μ centre , σ 2 = (12 µm) 2 ), where μ centre is the centre point of each section, to reduce the boundary effect, which helps consistent key generation under a minor shift variation in the image. After integrating the intensity of each section, the signal can be binarized compared with the preassigned threshold (Extended Data Fig. 5). Based on this process, one can generate unique dichroism keys, whose bits follow local polarization properties, depending on the complexity of metallic nanowires, which is extremely difficult to be replicated.
Raman key generation. Raman scattering measurements were carried out after aligning PUF labels using the preformed align keys. After laser exposure, the entire sample area is divided into 15 regions to compare the Raman scattering intensity from each region with an arbitrarily set threshold value (for example, the average of the Raman scattering intensity). Digitalization proceeds to generate 15 bits (Extended Data Fig. 7). The size of the key space that can be generated with our 15-bit CPR is 2 15 from a single-PUF label. Overall, the maximum size of the key space can be calculated by multiplying the number of each key space based on an independent mechanism (2 15 × 2 15 × 2 15 = 2 45 = 3.3 × 10 13 ).
Polarized optical reflectivity simulation study of nanoPUF. To analyse the reflectivity difference in nanoPUFs, electrodynamic simulation (finite-difference time-domain simulation, Lumerical) was conducted for bilayer stacked metallic nanowires depending on the angle between the nanowires and the polarization of incident light. In our simulation, the width and height of the wires are set at 50 and 10 nm, respectively, and the period in the width direction is 100 nm. The simulation results (Extended Data Fig. 3a,b) indicate that the reflectance can be randomized depending on the input polarization or orientation of the nanowires.
Plasmonic resonance simulation study of nanoPUF. To analyse the plasmonic resonance effect in nanoPUFs, electrodynamic simulation (finite-difference time-domain simulation, Lumerical) was conducted for bilayer stacked metallic nanowires depending on the angle between the nanowires and the polarization of incident light, with respect to the direction of the bottom wire layer. In our simulation, the width and height of the wires are set at 50 and 10 nm, respectively, and the period in the width direction is 100 nm. The simulation result (Extended Data Fig. 6) indicates that localized surface plasmon can be coupled among the complex interlocked metallic wires to induce a strong electric-field enhancement in the nanogap. Depending on the input polarization or orientation of nanowires, electric-field enhancement can be varied to affect the Raman enhancement (proportional to |E| 4 ; Fig. 2i); the Raman enhancement was calculated by integrating |E| 4 of a region smaller than 500 nm in depth of the substrate.
Calculation of PUF parameters. The test code for statistical analysis was built in the Python version 3.9 environment. The Hamming distance between two data strings is the number of different bits at which the corresponding symbols are different, and the Hamming weight is the number of zeroes in an n-bit response 38,39 .
Uniqueness. A PUF must be distinguishable from other PUFs obtained under the same fabrication process; however, the PUF should also be different by 50% from other PUFs. This metric is evaluated using the Hamming distance (HD) as below: where R i (n) and R j (n) are the n-bit responses of the ith and jth PUF, respectively, and k is the total number of PUFs.
Bit aliasing. The responses from different PUFs must be different by 50% to have identical responses. This metric is evaluated using the Hamming weight (HW) as below.

Bit aliasing
where R i (j) is the jth bit in an n-bit response from the ith PUF and k is the total number of PUFs.
Reliability. PUF must be able to generate a consistent response. This metric is evaluated using the Hamming distance as below: where R l i (n) is the n-bit response from the ith PUF at the lth trial, T is the number of trials and k is the total number of PUFs.
Calculation of number of distinguishable nanoidentifiers. By assuming that the confined area is a 1 μm × 1 μm square and the period (λ, centre-to-centre distance) of the BCP lamellar pattern is 60 nm, we were able to create a grid with a spacing of 60 nm inside the 1 μm 2 square 16 . Then, the effective possible positions, where minutia can exist, is the number of intersections inside the square, which is approximately 280 (17 horizontal lines and 17 vertical lines in the square). Additionally, we assume that the practical producible average minutiae density in 1 μm 2 is 10 (85 termination points in 8.5 μm 2 ) for termination (ridge ending) (Extended Data Fig. 10). The estimated maximum code capacity of one layer is 280 C 10 ≅ 6.937 × 10 17 under the assumption that there is only one type of minutiae of termination. Finally, when two fingerprint patterns are stacked, the maximum number of distinguishable nanoidentifiers can be calculated by multiplying the number of each distinguishable layer owing to the morphological independence of each layer. Therefore, the maximum number of distinguishable nanoidentifiers of the bilayer PUF label is about 4.8 × 10 35 .
Designation of noise level. Here I noise = I 0 (1 + N eff (rand -0.5)), where I 0 is the initial greyscale pixel value, I noise is the pixel value under artificial noise, N eff is the factor controlling the noise effect and rand denotes a random number extracted from a uniform distribution between 0 and 1.
Layer-separation image processing for bilayer stacked BCP patterns. For the minutiae point extraction of each layer from bilayer stacked BCP nanopattern images, layer separation is required before other image processing. As shown in Extended Data Fig. 9, the pixel intensities in bilayer stacked BCP images follow a multimodal distribution, where the distinctive intensity peaks correspond to empty space (dark pixels), bottom layer (middle peak) or the cross-points of two layers (bright pixels). The pixel for only the second (top) layer is brighter in greyscale intensity than that of only the first (bottom) layer, but little darker than the cross-points. Taking the intensity of the middle peak as a threshold, the top layer image can be separated from the original image. The bottom layer is revealed after taking off the first top layer and then recovering the crossing points-the pixels have a higher intensity next to the brightest peak. After separating the two layers, the image of each layer is treated by a conventional fingerprint recognition process, consisting of image normalization, segmentation, enhancement using a Gabor filter and line thinning (skeletonization), to extract the minutiae points, such as termination, bifurcation and crossing points.

Data availability
The data that support the findings of this study are available from the corresponding authors upon reasonable request.