Technical Features

TRANSFORM

  • Decrypts and re-encrypts a bitstream with a new key
  • Converts a plaintext bitstream into an AES-GCM encrypted bitstream
  • Converts an AES-GCM encrypted bitstream into a plaintext bitstream
  • Verifies a RSA authenticated bitstream
  • Re-signs an RSA authenticated bitstream
  • Re-encrypts RSA authenticated bitstreams
  • Performs microbitstream compression with the option of encryption

HARDEN

  • Decrypts and re-encrypts a bitstream with a new key
  • Remove commands for hardening purposes (e.g., WBSTAR)
  • Salt-injected NOPs to make encryption harder to solve
  • Shuffle commands to prevent breaking of encryption
  • Inject NOPs to prevent breaking of encryption

SECURITY VALIDATION

  • Detects method of authentication of a bitstream
  • Detects encryption used on a bitstream
  • Detects whether a Warm Boot Start register is used within a bitstream
  • Detects whether BRAM or eFUSE key storage is used
  • Detects encryption scheme of encrypted bitstreams
  • Provides overview of registers used

LEVEL OF ASSURANCE ASSESSMENT

  • Provides assessment on LoA compliance for specific threat descriptions
  • Provide security score with regard to LoA compliance
  • States criteria to become compliant
  • Recommends steps (when applicable) to achieve compliance
  • Provides information extracted from metadata when available

FPGA Support

  • UltraScale
  • UltraScale+
  • 7-Series

Future Support

  • 6-Series
  • Agilex 7
  • Stratix 10
  • Cyclone 10
  • PolarFire
  • IGLOO

System Support

Linux

  • Debian 11,12
  • Ubuntu 20.04+
  • RHEL 9/CentOS 9

Windowsย 

  • 7, 10, 11

MacOS

  • Catalina 10.15+