• Home

  • Documents

  • Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter...
34
Altera vs. Xilinx which one keeps your design hidden? 22. Aug. 2013 Amir Moradi Embedded Security Group Ruhr University Bochum, Germany

Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

Altera vs. Xilinx which one keeps your design hidden?

22. Aug. 2013

Amir Moradi

Embedded Security Group

Ruhr University Bochum, Germany

Page 2: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

2

Embedded Security Group

Acknowledge

Alessandro Barenghi

Markus Kasper

Timo Kasper

David Oswald

Pawel Swierczynski

Christof Paar

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 3: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

3

Embedded Security Group

SCA on Bitstream Encryption Feature

PCB board

E2PROM

Power-up DEC

VCC-IO VCC-AUX VCC-INT

E2PROM unencrypted bitstream

IEEE CASS| Singapore | 03. Apr. 2013 Amir Moradi

Page 4: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

4

Embedded Security Group

Broken Families

Virtex-II Pro, SASEBO

Virtex-4, Xilinx DevBoard

Virtex-5, SASEBO-GII

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 5: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

5

Embedded Security Group

Broken Families

Spartan-6, SASEBO-W

Stratix-II, SASEBO-B

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 6: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

6

Embedded Security Group

New Targets

Stratix-III, Altera DevKit

Kintex-7, SASEBO-GIII

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 7: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

7

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 8: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

8

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 9: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

9

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 10: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

10

Embedded Security Group

EM Analysis

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 11: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

11

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 12: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

12

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 13: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

13

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 14: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

14

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 15: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

15

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 16: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

16

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 17: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

17

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 18: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

18

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 19: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

19

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 20: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

20

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 21: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

21

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 22: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

22

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 23: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

23

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 24: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

24

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 25: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

25

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 26: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

26

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 27: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

27

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 28: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

28

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 29: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

29

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 30: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

30

Embedded Security Group

Decapping

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 31: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

31

Embedded Security Group

Altera’s Key Derivation

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Key1, Key2

FPGA

AES Key

Page 32: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

32

Embedded Security Group

AES Key=ENCKey1(Key2)

Selecting an arbitrary Key1’

Key2’=DECKey1’(AES Key)

(Key1’,Key2’) works the same as (Key1,Key2)

no added security!

Altera’s Key Derivation

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Key1, Key2

FPGA

f AES Key ENC

Counter

Bitstream Encrypted Bitstream

AES Key

Page 33: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

33

Embedded Security Group

Altera:

– AES-128 is replaced by AES-256

• Key derivation stays the same

– Counter is not increased arithmetically

• much heuristics + proprietary schemes

– revealed by reverse engineering the PC software

Old vs. New Generations

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi

Page 34: Altera vs. Xilinx · 8/22/2013  · Aug 2013 Amir Moradi Key1, Key2 FPGA f AES Key ENC Counter Encrypted Bitstream Bitstream AES Key . 33 Embedded Security Group Altera: –AES-128

34

Embedded Security Group

Altera:

– AES-128 is replaced by AES-256

• Key derivation stays the same

– Counter is not increased arithmetically

• much heuristics + proprietary schemes

– revealed by reverse engineering the PC software

Xilinx:

– AES-256 in CBC mode (as before)

– HMAC is introduced (Virtex-6 and all 7 series)

• no place in FPGA to save the HMAC key!

• The first block of the encrypted bitstream is the HMAC key!

Old vs. New Generations

CHES 2013| Ramp Session | Santa Barbara | 22. Aug 2013 Amir Moradi


Altera Dspbook

Altera Dspbook

Documents
Altera Lpm

Altera Lpm

Documents
(Algorithmen & Datenstrukturen)ac.informatik.uni-freiburg.de/.../Vorlesung10_annot.pdf · 2018. 5. 28. · key1 und ein Min-Heap bez. key2 Solange key2 unabhängig von allen insert/delete-Operationen

(Algorithmen & Datenstrukturen)ac.informatik.uni-freiburg.de/.../Vorlesung10_annot.pdf · 2018. 5. 28. · key1 und ein Min-Heap bez. key2 Solange key2 unabhängig von allen insert/delete-Operationen

Documents
Craig jamieson-icraf-mangrove palms- a-lost-key2 feedingsoutheastasia

Craig jamieson-icraf-mangrove palms- a-lost-key2 feedingsoutheastasia

Food
Relato Integrado na AES ANEFAC Arial, corpo 30 · PDF fileSOBRE A AES BRASIL AES Sul AES Eletropaulo AES Uruguaiana AES Tietê AES Serviços 10,4 mil colaboradores +8 milhões de unidades

Relato Integrado na AES ANEFAC Arial, corpo 30 · PDF fileSOBRE A AES BRASIL AES Sul AES Eletropaulo AES Uruguaiana AES Tietê AES Serviços 10,4 mil colaboradores +8 milhões de unidades

Documents
AES ELETROPAULO...Fazem parte do Grupo AES Brasil uma empresa de serviços, AES Serviços; duas distribuidoras, AES Eletropaulo e AES Sul; e duas geradoras, AES Uruguaiana e AES Tietê

AES ELETROPAULO...Fazem parte do Grupo AES Brasil uma empresa de serviços, AES Serviços; duas distribuidoras, AES Eletropaulo e AES Sul; e duas geradoras, AES Uruguaiana e AES Tietê

Documents
 · 2020. 3. 17. · immo-keyi out immo-keyi in immo-key2 out immo-key2 in immo-key2 out immo-keyi in immo-keyi out key data [mmo-keyi 23.3 gm clone 23.3 gm2 2.3.3 ford (40bit 80bit)

 · 2020. 3. 17. · immo-keyi out immo-keyi in immo-key2 out immo-key2 in immo-key2 out immo-keyi in immo-keyi out key data [mmo-keyi 23.3 gm clone 23.3 gm2 2.3.3 ford (40bit 80bit)

Documents
altera (2)

altera (2)

Documents
AES AES Kazakhstan Business Review AES ...(Unit 8) 500MW (Unit 2) 12 AES Kazakhstan Financial Overview Revenue Gross Margin Income Before Tax & Minority Interest Distributions to AES

AES AES Kazakhstan Business Review AES ...(Unit 8) 500MW (Unit 2) 12 AES Kazakhstan Financial Overview Revenue Gross Margin Income Before Tax & Minority Interest Distributions to AES

Documents
Max10fpga Altera

Max10fpga Altera

Documents
What’s New in Simulator Version 18 - PowerWorld...– Gen11A Gen '11' 'A‘ • Generally removed use of old format throughout –

What’s New in Simulator Version 18 - PowerWorld...– Gen11A Gen '11' 'A‘ • Generally removed use of old format throughout –

Documents
Altera Time

Altera Time

Documents
RelatóRio de SuStentabilidade 2008 2008_port.pdf · 1981 – a Light passa ao governo paulista, que altera o nome da empresa para Eletropaulo – ... paulo Telecom e AES Com Rio

RelatóRio de SuStentabilidade 2008 2008_port.pdf · 1981 – a Light passa ao governo paulista, que altera o nome da empresa para Eletropaulo – ... paulo Telecom e AES Com Rio

Documents
Altera Ravista

Altera Ravista

Documents
CRN/CRN_Fall_20-21.pdfCRNS Details Date: 13-08-2020 Page: 1 57 AES-711 AES-711P AES-712 AES-722 AES-722P AES-722P AES-723 AES-731 Course No Course No Course No Course No Course No

CRN/CRN_Fall_20-21.pdfCRNS Details Date: 13-08-2020 Page: 1 57 AES-711 AES-711P AES-712 AES-722 AES-722P AES-722P AES-723 AES-731 Course No Course No Course No Course No Course No

Documents
Objective Key2 Elementary Students Book Without Answers Frontmatter

Objective Key2 Elementary Students Book Without Answers Frontmatter

Documents
RO BlackBerry® KEY2 LE Informaţii despre siguranţă şi produs-+KEY2+LE/KEY... · conţine componente cu benzi magnetice, precum carduri de debit, carduri de credit, carduri de

RO BlackBerry® KEY2 LE Informaţii despre siguranţă şi produs-+KEY2+LE/KEY... · conţine componente cu benzi magnetice, precum carduri de debit, carduri de credit, carduri de

Documents
AES CORPORATION Dale W. Perry Vice President AES Corporation Regional Electricity Integration: The AES Focus

AES CORPORATION Dale W. Perry Vice President AES Corporation Regional Electricity Integration: The AES Focus

Documents
AES Corporation © 2014  · AES Corporation © 2014 4 . AES Corporation © 2014 5

AES Corporation © 2014  · AES Corporation © 2014 4 . AES Corporation © 2014 5

Documents
Altera pars

Altera pars

Business
Altera Revista

Altera Revista

Documents
Altera Presentation

Altera Presentation

Technology
DHZO-A* DKZOR-A* · dhzo-a* dkzor-a* 2 *-a *-ae -aes -a, (ae) (aes) *-aeg: a ( g120 )-ae aes 7 12 aeg aes /z-aes aeg *-ps rs232 712 *-bc canbus -aes *-bp profibus-dp -aes h iso 4401

DHZO-A* DKZOR-A* · dhzo-a* dkzor-a* 2 *-a *-ae -aes -a, (ae) (aes) *-aeg: a ( g120 )-ae aes 7 12 aeg aes /z-aes aeg *-ps rs232 712 *-bc canbus -aes *-bp profibus-dp -aes h iso 4401

Documents
ALTERA~AOTOTALDEESTATUTOS§ão... · nas instala",aes do Quartel Novosite na Rua das Cruzes, ... LOUVOR, por delibera!;iio do Comando, ... 3. 0 distintlvo d'honra da Associalrao em

ALTERA~AOTOTALDEESTATUTOS§ão... · nas instala",aes do Quartel Novosite na Rua das Cruzes, ... LOUVOR, por delibera!;iio do Comando, ... 3. 0 distintlvo d'honra da Associalrao em

Documents
Geochemischen Analytik - geochemie.ifg.uni-kiel.de · 6 Calcium ICP-AES Magnesium ICP-AES Eisen ICP-AES, AAS-GF Mangan ICP-AES, AAS-GF Kieselsäure (als Si) ICP-AES, AAS-GF Die gelösten

Geochemischen Analytik - geochemie.ifg.uni-kiel.de · 6 Calcium ICP-AES Magnesium ICP-AES Eisen ICP-AES, AAS-GF Mangan ICP-AES, AAS-GF Kieselsäure (als Si) ICP-AES, AAS-GF Die gelösten

Documents
Altera Tutorial

Altera Tutorial

Documents
Cryptography - UPB · AES • AES is the 128 bit block version of the Rijndael Cipher • Very fast • Hardware support • AES-128, AES-192 and AES-256 refer to key sizes, and not

Cryptography - UPB · AES • AES is the 128 bit block version of the Rijndael Cipher • Very fast • Hardware support • AES-128, AES-192 and AES-256 refer to key sizes, and not

Documents
AP Equation Key2

AP Equation Key2

Documents
XAT 2012 Questions and Answer-Key2(1)

XAT 2012 Questions and Answer-Key2(1)

Documents
AES EMEA Generation Business Review AES CORPORATION · AES Goals AES 2008 Target AES EMEA Generation Role--$3.5 Billion 13-19% per Year 11%-----Above Average Above Average Below Average

AES EMEA Generation Business Review AES CORPORATION · AES Goals AES 2008 Target AES EMEA Generation Role--$3.5 Billion 13-19% per Year 11%-----Above Average Above Average Below Average

Documents