Protecting FPGA Bitstreams Using Authenticated Encryption

Karim Moussa Ali Abdellatif (1) , Roselyne Chotin-Avot (1) , Habib Mehrez (2)

1 LIP6 - Laboratoire d'Informatique de Paris 6
2 CIAN - Circuits Intégrés Numériques et Analogiques

This paper describes low cost solution for bitstream security by adding authentication and encryption to the reconfiguration process using Authenticated Encryption (AE). Compact ASIC architecture for AE is presented: Counter with Cipher Block Chaining-Message Authentication Code (CCM). Proposed architecture utilizes Advanced Encryption Standard (AES) in Counter mode (CTR) for encryption. For authentication, AES in Cipher Block Chaining (CBC) is used. Therefore, one architecture of AES for both encryption and authentication decreases the consumed area. In addition, using AES in 32-bit enhances the compact architecture. Our design was evaluated by using a 90 nm CMOS standard cell library. The proposed architecture of CCM requires 0.045 mm2. In term of speed, CCM works with 407 Mbps. Our proposed architecture can be used efficiently for secure configuration of FPGAs.

Mots clés: FPGA bitstream; Authenticated Encryption; Compact architecture; ASIC; FPGA bitstream.

Domaines: Electronique; Arithmétique des ordinateurs; Cryptographie et sécurité [cs.CR]

Karim Moussa Ali Abdellatif, Roselyne Chotin-Avot, Habib Mehrez. Protecting FPGA Bitstreams Using Authenticated Encryption. 11th IEEE INTERNATIONAL NEWCAS CONFERENCE June 16-19, Paris, France, Jun 2013, paris, France. pp.1-4. ⟨hal-01017823v1⟩