Vendor:
Synopsys, Inc.
Category:
Public Key
Agile ECC/RSA Public Key Accelerator with 32-bit ALU
Common public key algorithms include RSA, Digital Signature Algorithm (DSA), and Diffie-Hellman (DH), which require the calculati…
Overview
Common public key algorithms include RSA, Digital Signature Algorithm (DSA), and Diffie-Hellman (DH), which require the calculation of complex modular exponentiation operations to encrypt, decrypt, sign, and verify data used in data encryption, digital signatures, and key exchanges. Similarly, the Elliptic Curve Cryptography (ECC) based algorithms require complex mathematical operations, such as point multiplications, and are designed to support devices with limited computing power or memory to encrypt internet traffic. These operations refer to huge numbers -- from 160- to 521 bits for ECC operations and from 1,024 to 4,096 bits or more for RSA operations. However, most CPUs are limited to operations on 32- and 64-bit values and require significant computational resources when implementing public key infrastructure-related algorithms.
The ECC/RSA Public Key Accelerator (PKA) is designed to significantly accelerate these cumbersome operations, executing the computationally intensive elements of the mathematics required for RSA operations and the algorithms used in prime field ECC.
The ECC/RSA PKA IP integrates seamlessly with the Cryptography Software Library, enabling designers to accelerate the asymmetric cryptography required in public key algorithms to reach performance and energy efficiency levels that are not achievable in software-only solutions.
The ECC/RSA PKAs are configurable IP cores, supporting a broad range of mathematical operations, size, and performance options. These configuration options enable designers to select a wide range of capabilities suitable for applications ranging from edge devices to the most advanced cloud infrastructure, targeting markets such as cloud computing, consumer, IoT, mobile, automotive, industrial, aerospace, and defense.
Key features
- Offloads the computationally intensive parts of public key cryptography
- Support for ARM® AMBA® AHB™/AXI™ and synchronous RAM interfaces
- Integer operations (512-, 768-, 1024-, 1536-, 2048-, 3072-, and 4096-bit)
- Modular exponentiation, division, multiplication, inversion, addition, and subtraction
- ECC-GF(p) operations (160, 192, 224, 256, 384, 512 and 521-bit)
- Point multiplication, addition, doubling, and verification
- Support for elliptic curves Curve25519 and Ed25519 (also referred to as Twisted Edwards curves)
- Support for Chinese elliptic curve SM2
- Highly configurable at build time
- Configurable firmware memory type
- RAM only
- ROM only
- RAM/ROM mix
- Optional: Differential Power Analysis (DPA)/Timing Analysis (TA) side-channel countermeasures
- Optional: Synopsys Cryptography Software Library for RSA, Diffie-Hellman, DSA, and prime field ECC operations such as ECDSA and ECDH
- Optional: Synopsys True Random Number Generator for DPA/TA support
Benefits
- Dramatic acceleration of Public Key Exchange operations
- Including key generation
- Particularly significant for private key functions
- Substantial power reduction relative to software-based implementations
- Choice of several performance grades, to enable performance vs. silicon area trade-offs
- Advanced DPA and DTA resistance features minimize exposure to sophisticated side-channel attacks, useful for payment card, government and military applications
- ROM-based firmware eliminates attacks on firmware image, enables secure boot
Files
Note: some files may require an NDA depending on provider policy.
Specifications
Identity
Part Number
dwc_agile_ecc_rsa_32bit_pka
Vendor
Synopsys, Inc.
Provider
Synopsys, Inc.
HQ:
USA
Synopsys is a leading provider of high-quality, silicon-proven semiconductor IP solutions for SoC designs. The broad Synopsys IP portfolio includes logic libraries, embedded memories, analog IP, wired and wireless interface IP, security IP, embedded processors and subsystems. To accelerate IP integration, software development, and silicon bring-up, Synopsys’ IP Accelerated initiative provides architecture design expertise, pre-verified and customizable IP subsystems, hardening, and signal/power integrity analysis. Synopsys' extensive investment in IP quality, comprehensive technical support and robust IP development methodology enables designers to reduce integration risk and accelerate time-to-market.
Learn more about Public Key IP core
Securing the IoT: Part 1 - Public key cryptography
The authors detail security risks facing the developer of an Internet of Things device and recommend the best public key-based algorithms to use.
Smart Engine for Public Key cryptography
This white paper explains why and how the Smart Engine is ideally applied to Public Key cryptography. It provides more details about the architecture as Baco Silex has implemented it in the BA414E Public Key Crypto Engine
Public key cryptography and security certificates
This article explains public key cryptography and the role of security certificates and the way they are used by the secure protocols to provide ultimate security.
Securing your apps with Public Key Cryptography & Digital Signature
Formally verifying AVX2 rejection sampling for ML-KEM
Formal verification of cryptography comes in many flavours. The levels of abstraction range from high-level protocol designs to machine-level implementations. At each level of abstraction, different target properties and formal verification technologies apply. In this post we look at the latter end of this spectrum and consider a highly-optimized architecture-specific implementation of a core routine of the recent NIST post-quantum standard FIPS-203: Module-Lattice-Based Key Encapsulation Mechanism (ML-KEM)
Frequently asked questions about Public-Key Cryptography IP cores
What is Agile ECC/RSA Public Key Accelerator with 32-bit ALU?
Agile ECC/RSA Public Key Accelerator with 32-bit ALU is a Public Key IP core from Synopsys, Inc. listed on Semi IP Hub.
How should engineers evaluate this Public Key?
Engineers should review the overview, key features, supported foundries and nodes, maturity, deliverables, and provider information before shortlisting this Public Key IP.
Can this semiconductor IP be compared with similar products?
Yes. Buyers can compare this product with similar semiconductor IP cores or IP families based on category, provider, process options, and structured technical specifications.