CDPCLK4 datasheet(231/274 Pages) ALTERA

231 / 274 page

Chapter 9: Configuration, Design Security, and Remote System Upgrades in the Cyclone III Device Family

9–73

Design Security

August 2012

Altera Corporation

Cyclone III Device Handbook

Volume 1

The Cyclone III LS design security feature provides routing architecture optimization

for design separation flow with the Quartus II software. Design separation flow

achieves both physical and functional isolation between design partitions.

f For more information about the design separation flow, refer to AN 567: Quartus II

Design Separation Flow.

You can carry out secure configuration in Steps 1–3, as shown in Figure 9–31:

1. Generate the encryption key programming file and encrypt the configuration data.

The Quartus II configuration software uses the user-defined 256-bit volatile keys

to generate a key programming file and an encrypted configuration file. The

encrypted configuration file is stored in an external memory, such as a flash

memory or a configuration device.

2. Program the volatile key into the Cyclone III LS device.

Program the user-defined 256-bit volatile keys into the Cyclone III LS device

through the JTAG interface.

3. Configure the Cyclone III LS device.

At system power-up, the external memory device sends the encrypted

configuration file to the Cyclone III LS device.

Available Security Modes

There are several security modes available on Cyclone III LS devices, they are:

■

Volatile Key

■

No Key Operation

■ FACTORY

Mode

Volatile Key

Secure operation with volatile key programmed and required external battery—this

mode accepts both encrypted and unencrypted configuration bitstreams. Use the

unencrypted configuration bitstream support for board-level testing only.

Figure 9–31. Cyclone III LS Secure Configuration Flow (1)

Note to Figure 9–31:

(1) Step 1, Step 2, and Step 3 correspond to the procedure detailed in “Cyclone III LS Design Security Solution”.

AES

Decryptor

FPGA

Volatile Key

Encrypted

Configuration

Data

Encryption Key

Programming File

Encrypted

Configuration

Data

Configuration

Data

Step 1. Generate the Encryption Key Programming File

Encrypt Configuration Data and Store in External Memory

Step 3. Configure the Cyclone III LS Device

Using Encrypted Configuration Data

Quartus II

Step 2. Program Volatile Key into

Cyclone III LS Device

Volatile Key

Volatile

Key Storage

Memory

Storage

Encrypted

Configuration

Data

AES

Encryptor

CDPCLK4 Scheda tecnica(PDF) 231 Page - Altera Corporation

CDPCLK4 Scheda tecnica(HTML) 231 Page - Altera Corporation

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Scheda tecnica Scarica

Link URL