Security in Low-Power Flash Devices
15- 24
v1.1
STAPL File with AES Encryption
Does not contain AES key / FlashLock Key information
Intended for transmission through web or service to unsecured locations for programming
=============================================
NOTE "CREATOR" "Designer Version: 6.1.1.108";
NOTE "DEVICE" "A3PE600";
NOTE "PACKAGE" "208 PQFP";
NOTE "DATE" "2005/04/08";
NOTE "STAPL_VERSION" "JESD71";
NOTE "IDCODE" "$123261CF";
NOTE "DESIGN" "counter32";
NOTE "CHECKSUM" "$EF57";
NOTE "SAVE_DATA" "FRomStream";
NOTE "SECURITY" "ENCRYPT FROM CORE ";
NOTE "ALG_VERSION" "1";
NOTE "MAX_FREQ" "20000000";
NOTE "SILSIG" "$00000000";
Conclusion
The new and enhanced security features offered in Actel IGLOO, Fusion, and ProASIC3 devices
provide state-of-the-art security to designs programmed into these flash-based devices. Actel low-
power flash devices employ the encryption standard used by NIST and the U.S. government—AES
using the 128-bit Rijndael algorithm.
The combination of an on-chip AES decryption engine and Actel FlashLock technology provides the
highest level of security against invasive attacks and design theft, implementing the most robust
and secure ISP solution. These security features protect IP within the FPGA and protect the system
from cloning, wholesale “black box” copying of a design, invasive attacks, and explicit IP or data
theft.
Glossary
Term
Explanation
Security Header
programming file
Programming file used to program the FlashLock Pass Key and/or AES key into the
device to secure the FPGA, FlashROM, and/or FBs.
AES (encryption) key 128-bit key defined by the user when the AES encryption option is set in the Actel
Designer software when generating the programming file.
FlashLock Pass Key
128-bit key defined by the user when the FlashLock option is set in the Actel Designer
software when generating the programming file.
The FlashLock Key protects the security settings programmed to the device. Once a
device is programmed with FlashLock, whatever settings were chosen at that time are
secure.
FlashLock
The combined security features that protect the device content from attacks. These
features are the following:
Flash technology that does not require an external bitstream to program the device
FlashLock Pass Key that secures device content by locking the security settings and
preventing access to the device as defined by the user
AES key that allows secure, encrypted device reprogrammability