Cloud native EDA tools & pre-optimized hardware platforms
The number of devices, machines, or sensors linked over open communication networks on the Internet of Things (IoT) has exploded. Every device represents a potential entry point for malicious intrusion – into the device itself or its network.
Cryptographic keys are needed to verify a device’s identity, secure communication between devices, and encrypt sensitive data at rest and in transit. Synopsys Software-based PUF IP - 200 is a secure key generation, management, and storage solution for any IoT device. Synopsys Software-based PUF solution is the only hardware entropy source currently available that doesn’t have to be loaded at silicon fabrication.
The Synopsys Software-based PUF - 200 API enables IoT developers to generate cryptographic keys securely and to perform other symmetric key functions. It can also be integrated as a trust anchor for Mbed TLS, OpenSSL, wolfSSL, and other libraries, extending the chain of trust beyond just a single device.
Device makers need a way to protect keys and other secret material. This is typically done by encrypting or wrapping them with other keys. But how do you protect the encryption root key? How to keep secrets secret?
Synopsys Software-based PUF IP - 200 uses inherently random SRAM start-up values as a PUF from which the root key is generated. The root key is never stored and is only available (in-volatile memory) when needed. This means the key is never present in persistent memory – not even when the chip is powered down – which raises the security significantly and eliminates the need for OTP or other secure memory.
Synopsys Software-based PUF - 200 offers functions to wrap and manage secret keys and data which then can be stored in unprotected memory or can be securely transmitted over the network. A potentially unlimited number of keys can be derived from the root key by using the NIST-compliant key-derivation function.
Synopsys Software-based PUF - 200 also offers random values, generated by a NIST 800-90A/B-compliant random number generator and a collision-free unique device identity (UID). All Synopsys Software-based PUF IP features are accessed by the host software via the API.
SRAM PUF responses have been qualified for use with the Synopsys Software-based PUF IP products in a wide range of operational environments over years of field operation:
The Synopsys Software-based PUF IP - 200 products are available in off-the-shelf configurations with sizes ranging between 10 kB and 14 kB. Configurations differ according to functionality, performance, and compliance.
Specifications | Synopsys Software-based PUF - 200 |
---|---|
Security strength (bits) | 128 / 256 |
SRAM PUF (kB) | 0.7 / 1.0 |
Code size (kB) | 10 - 14 |
SRAM anti-aging | ✓ |
Device-unique identifier (UID) | ✓ |
Generate device-unique keys | ✓ |
Generate random values | ✓ |
Wrap and unwrap application keys | ✓ |
Streaming AES, Hash, MAC | ✓ |
NIST CAVP certification (DRBG, AES, KDF, HMAC, SHA-2) | ✓ |
NIST SP 800-90A compliant DRBG | ✓ |
NIST SP 800-90B compliant entropy source for RNG (adds about 3kB of SRAM) | (✓) |
FIPS 140-3 ready | (✓) |
Markets | Applications |
Certifications |
|
|
|