2.2.3 Data Security

Data security protects the information that IGLOO 2 FPGA stores, processes, or communicates with the end application. If, for example, the configured design allows implementing the key management and encryption portion of a secure military radio, data security is entailed in encrypting and authenticating the radio traffic, and protecting the associated application-level cryptographic keys. Data security is closely related to the terms Information Assurance (IA) and information security. All IGLOO 2 devices incorporate enhanced design security, making them the most secure programmable logic devices ever made. Select IGLOO 2 models also include an advanced set of on-chip data security features that helps designing the most secure information assurance applications easier and better than ever before.

The following table lists the data security features of IGLOO 2.

Table 2-2. Data Security Features
Features (S Devices) M2GL005S, M2GL010S, M2GL010TS, M2GL025TS, and M2GL050TSM2GL060TS, M2GL090TS,and M2GL150TS
CRI pass-through DPA patent licenseAvailableAvailable
Hardware firewalls protecting access to memoriesAvailableAvailable
Non-deterministic random bit generator serviceAvailableAvailable
AES-128/256service (ECB, OFB, CTR, and CBC modes)AvailableAvailable
SHA-256serviceAvailableAvailable
HMAC-SHA-256serviceAvailableAvailable
Key tree serviceAvailableAvailable
PUF emulation (Pseudo-PUF)Available
PUF emulation (SRAM-PUF)Available
ECC point-multiplication serviceAvailable
ECC point-addition serviceAvailable
User SRAM-PUF enrollment serviceAvailable
User SRAM-PUF activation code export serviceAvailable
SRAM-PUF intrinsic key gen. and enrollment serviceAvailable
SRAM-PUF key import and enrollment serviceAvailable
SRAM-PUF key regeneration serviceAvailable