Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter...

34
Altera vs. Xilinx which one keeps your design hidden? 22. Aug. 2013 Amir Moradi Embedded Security Group Ruhr University Bochum, Germany

Transcript of Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter...

Page 1: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

Altera vs. Xilinx which one keeps your design hidden?

22. Aug. 2013

Amir Moradi

Embedded Security Group

Ruhr University Bochum, Germany

Page 2: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

2

Embedded Security Group

Acknowledge

Alessandro Barenghi

Markus Kasper

Timo Kasper

David Oswald

Pawel Swierczynski

Christof Paar

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 3: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

3

Embedded Security Group

SCA on Bitstream Encryption Feature

PCB board

E2PROM

Power-up DEC

VCC-IO VCC-AUX VCC-INT

E2PROM unencrypted bitstream

IEEE CASS| Singapore | 03. Apr. 2013 Amir Moradi

Page 4: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

4

Embedded Security Group

Broken Families

Virtex-II Pro, SASEBO

Virtex-4, Xilinx DevBoard

Virtex-5, SASEBO-GII

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 5: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

5

Embedded Security Group

Broken Families

Spartan-6, SASEBO-W

Stratix-II, SASEBO-B

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 6: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

6

Embedded Security Group

New Targets

Stratix-III, Altera DevKit

Kintex-7, SASEBO-GIII

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 7: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

7

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 8: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

8

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 9: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

9

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 10: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

10

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 11: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

11

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 12: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

12

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 13: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

13

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 14: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

14

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 15: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

15

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 16: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

16

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 17: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

17

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 18: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

18

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 19: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

19

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 20: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

20

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 21: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

21

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 22: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

22

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 23: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

23

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 24: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

24

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 25: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

25

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 26: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

26

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 27: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

27

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 28: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

28

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 29: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

29

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 30: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

30

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 31: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

31

Embedded Security Group

Altera’s Key Derivation

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Key1, Key2

FPGA

AES Key

Page 32: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

32

Embedded Security Group

AES Key=ENCKey1(Key2)

Selecting an arbitrary Key1’

Key2’=DECKey1’(AES Key)

(Key1’,Key2’) works the same as (Key1,Key2)

no added security!

Altera’s Key Derivation

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Key1, Key2

FPGA

f AES Key ENC

Counter

Bitstream Encrypted Bitstream

AES Key

Page 33: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

33

Embedded Security Group

Altera:

– AES-128 is replaced by AES-256

• Key derivation stays the same

– Counter is not increased arithmetically

• much heuristics + proprietary schemes

– revealed by reverse engineering the PC software

Old vs. New Generations

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 34: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

34

Embedded Security Group

Altera:

– AES-128 is replaced by AES-256

• Key derivation stays the same

– Counter is not increased arithmetically

• much heuristics + proprietary schemes

– revealed by reverse engineering the PC software

Xilinx:

– AES-256 in CBC mode (as before)

– HMAC is introduced (Virtex-6 and all 7 series)

• no place in FPGA to save the HMAC key!

• The first block of the encrypted bitstream is the HMAC key!

Old vs. New Generations

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi


Altera Dspbook

Altera Dspbook

ALTERA Embedded Programmable

ALTERA Embedded Programmable

AES CORPORATION Dale W. Perry Vice President AES Corporation Regional Electricity Integration: The AES Focus.

AES CORPORATION Dale W. Perry Vice President AES Corporation Regional Electricity Integration: The AES Focus.

AES SERIES The AES features the advanced DCS ......BATTERy CHARACTERISTICS DIMENSIONS & WEIGHTS INDUSTRy LEADING CyCLE LIFE Battery Termination AES-390 AES-600 AES-900 69 lbs. AES-1060

AES SERIES The AES features the advanced DCS ......BATTERy CHARACTERISTICS DIMENSIONS & WEIGHTS INDUSTRy LEADING CyCLE LIFE Battery Termination AES-390 AES-600 AES-900 69 lbs. AES-1060

DIP Answer Key1

DIP Answer Key1

Cyclone FPGA Altera

Cyclone FPGA Altera

Atomic-AES: A Compact Implementation of the AES Encryption ... · Atomic-AES: A Compact Implementation of the AES Encryption/Decryption Core ... In this paper we present Atomic-AES,

Atomic-AES: A Compact Implementation of the AES Encryption ... · Atomic-AES: A Compact Implementation of the AES Encryption/Decryption Core ... In this paper we present Atomic-AES,

Altera SDK for OpenCL Programming Guidebigdat.nmsu.edu/opencl/aocl_programming_guide.pdf · Altera Offline Compiler Kernel Compilation Flows The Altera Offline Compiler can create

Altera SDK for OpenCL Programming Guidebigdat.nmsu.edu/opencl/aocl_programming_guide.pdf · Altera Offline Compiler Kernel Compilation Flows The Altera Offline Compiler can create

Altera RS-232

Altera RS-232

Dsp Matlab Altera

Dsp Matlab Altera

CRN/CRN_Fall_20-21.pdfCRNS Details Date: 13-08-2020 Page: 1 57 AES-711 AES-711P AES-712 AES-722 AES-722P AES-722P AES-723 AES-731 Course No Course No Course No Course No Course No

CRN/CRN_Fall_20-21.pdfCRNS Details Date: 13-08-2020 Page: 1 57 AES-711 AES-711P AES-712 AES-722 AES-722P AES-722P AES-723 AES-731 Course No Course No Course No Course No Course No

Altera MAX 7000 Macrocell (Review) Altera MAX 7000 Routing ...walker/classes/vlsi.s06/lectures/L23.pdf · Altera MAX 7000 Macrocell (Review) Figure from Altera technical literature!A

Altera MAX 7000 Macrocell (Review) Altera MAX 7000 Routing ...walker/classes/vlsi.s06/lectures/L23.pdf · Altera MAX 7000 Macrocell (Review) Figure from Altera technical literature!A

Forecast key1 0615_ak_evening

Forecast key1 0615_ak_evening

Vhdl Altera Curso

Vhdl Altera Curso

Analog for Altera FPGA - Mouser · PDF fileAnalog for Altera® FPGAs Table of Contents Table of Contents Analog for Altera® FPGAS 2 Introduction Power Solutions for Altera FPGAs 3

Analog for Altera FPGA - Mouser · PDF fileAnalog for Altera® FPGAs Table of Contents Table of Contents Analog for Altera® FPGAS 2 Introduction Power Solutions for Altera FPGAs 3

WiMax Altera Manual.pdf

WiMax Altera Manual.pdf

Arria V Booting and Configuration - Altera · Booting and Configuration Introduction Altera Corporation ... U-boot. Altera Corporation ... (for its stack and data, ...

Arria V Booting and Configuration - Altera · Booting and Configuration Introduction Altera Corporation ... U-boot. Altera Corporation ... (for its stack and data, ...

Altera Ships 100,000-Gate PLDebook.pldworld.com/_Semiconductors/Altera/literature/_nv/... · 2003-01-09 · Altera Ships 100,000-Gate PLD Altera is now shipping the EPF10K100 device,

Altera Ships 100,000-Gate PLDebook.pldworld.com/_Semiconductors/Altera/literature/_nv/... · 2003-01-09 · Altera Ships 100,000-Gate PLD Altera is now shipping the EPF10K100 device,

AES EMEA Generation Business Review AES CORPORATION · AES Goals AES 2008 Target AES EMEA Generation Role--$3.5 Billion 13-19% per Year 11%-----Above Average Above Average Below Average

AES EMEA Generation Business Review AES CORPORATION · AES Goals AES 2008 Target AES EMEA Generation Role--$3.5 Billion 13-19% per Year 11%-----Above Average Above Average Below Average

Altera Device Package Information Data Sheetedg.uchicago.edu/~tang/capmap/ds_pkg_9_1e.pdf · 2 Altera Corporation Altera Device Package Information Data Sheet Thermal Resistance Tables

Altera Device Package Information Data Sheetedg.uchicago.edu/~tang/capmap/ds_pkg_9_1e.pdf · 2 Altera Corporation Altera Device Package Information Data Sheet Thermal Resistance Tables