Fortifying Security with Securyzr^TM Hardware Security Module (HSM) for AMD Xilinx FPGA devices

The HSM IP module is a Hardware Security Module designed to fortify a wide array of applications. Developed, rigorously validated, and officially licensed by Secure-IC, this FPGA-based IP solution is built in strict accordance with the standards set forth by the EVITA project. Its primary objective is to be seamlessly integrated into the AMD Xilinx Versal® ACAP device, complete with support for TrustZone technology.

In the era of expanding industrial system connectivity, the imperative for preserving data integrity and ensuring system authentication has never been more pressing. Embedded cybersecurity plays a pivotal role in meeting these demands. Securyzr™ Solutions have a clear mission: safeguarding sensitive data, preventing unauthorized access and maintaining the integrity of systems. These robust solutions, provided by Secure-IC, place a strong emphasis on security without compromising system performance and power efficiency. At the core of this security ecosystem stands the Hardware Security Module (HSM). Functioning as a dedicated security enclave, the HSM takes on the crucial responsibilities of secure key management and cryptographic processing, serving as an impenetrable fortress for safeguarding your critical assets.

What makes the HSM IP module particularly remarkable is its ability to eliminate the need for a dedicated HSM device. This solution incorporates two key components:

1. HSM Hardware IP: Designed for implementation in the programmable fabric of the AMD Versal® ACAP, this hardware IP module forms the backbone of the security infrastructure.
2. Software Stack: The software stack includes HSM firmware, HSM driver code, and an interface layer facilitating integration into the AUTOSAR framework, making it ideal for automotive applications.

Leveraging the power of Xilinx Versal® intrinsic Security Features

One of the standout features of this solution is its seamless integration with the intrinsic security features of the Xilinx Versal® ACAP platform: Crypto Engines: The HSM IP module taps into the platform’s cryptographic engines, enabling robust cryptographic operations for enhanced security. Root-of-Trust: Trust is the foundation of security. The HSM module leverages the Versal® platform’s Root-of-Trust mechanisms to establish a secure foundation for all operations. Secure Key Storage: Secure key management is crucial. With this solution, sensitive keys are stored securely, reducing the risk of unauthorized access.

Features of Securyzr^TM HSM IP Module

Exclusive Access Control with ‘Xilinx Peripheral Protection Unit’

The ‘Xilinx Peripheral Protection Unit’ (XPPU) empowers the Versal® Hard IP to provide exclusive access to its IPs to the integrated Secure Element (iSE). This mechanism ensures that only authorized entities can interact with critical system components, bolstering overall security.

Secure Boot Ensures Integrity and Authenticity

To further enhance security, the secure boot process of the Versal® FPGA is employed to load the bitstream containing the iSE hardware. This guarantees the integrity and authenticity of all components within the FPGA, creating a secure foundation for the system. Once the HSM is programmed onto the matrix, health tests are established, and the firmware quickly becomes operational to execute commands coming from the Host CPU through the mailbox, in a secure environment. 

Configurable, Scalable and Flexible solution

The HSM IP module is highly adaptable and can be scaled and configured to meet the specific requirements of diverse applications. This flexibility allows for optimal utilization of FPGA resources, leaving room for other functions.

The Xilinx Versal® ACAP Platform

The AMD Xilinx Versal® ACAP platform, built on TSMC 7 nm FinFET process technology, is a testament to innovation. It combines Scalar Engines, Adaptable Engines, and Intelligent Engines with state-of-the-art memory and interfacing technologies, offering formidable heterogeneous acceleration for a wide range of applications.

In a world where security of IoT devices is increasingly important, Secure-IC’s HSM IP module for the AMD Versal® ACAP not only fortifies systems with robust hardware security but also leverages the intrinsic security features of the Versal® platform to create an impenetrable fortress of protection.

Whether you’re in the automotive industry or any other sector requiring uncompromising security, the HSM IP module is your trusted ally in safeguarding your most critical assets.

For more information about the HSM IP module and how it can enhance the security of your AMD Xilinx Versal® ACAP device, get in touch with us or download the product sheet.