Lightweight and Configurable Root-of-Trust Soft IP

Overview

QRoot Lite™ is a silicon IP solution designed specifically for resource-constrained MCUs and IoT devices. It provides essential security capabilities including secure boot, device attestation, and sealed storage. Built on the industry-standard TCG MARS specification, QRoot Lite™ simplifies integration, reduces costs, and accelerates your journey toward regulatory compliance and trusted embedded products.

Lightweight, Configurable Security

QRoot Lite™ is optimized for minimal silicon footprint (~25k gates), making it ideal for resource-constrained microcontrollers and IoT SoCs.

Rapidly implement secure boot and attestation capabilities without significant area, cost, or complexity overhead.

Secure Boot & Firmware Integrity

Protect your devices at boot-time by ensuring only authorized firmware and software run, verified through trusted measurements and cryptographic signatures.

Prevent malicious software attacks, unauthorized access, and firmware tampering to safeguard critical device functionality.

Standards-Based Attestation

QRoot Lite™ fully aligns with the Trusted Computing Group’s MARS specification, providing standard attestation and measurement reporting (PCR/TSR).

Achieve compliance with industry standards effortlessly, enabling your product to meet rigorous security regulations and customer demands.

Sealed Storage (Key Protection)

Safely store cryptographic keys and sensitive data by cryptographically binding storage to the device identity and its verified state.

Ensure that secret keys remain protected even if hardware falls into unauthorized hands, safeguarding data against tampering and cloning.

Flexible Cryptography (Hash, MAC, KDF)

Choose from configurable cryptographic primitives, such as SHA-2 and NIST-approved lightweight algorithms like Ascon, tailored to your performance and security requirements.

Maintain cryptographic agility to ensure future-proof security as threats evolve and standards advance.

Hardware & Firmware Integration Simplicity

QRoot Lite™ integrates easily via standard industry interfaces (APB, AXI, SPI, UART) and provides a clean, intuitive firmware API compatible with the MARS command set.

Simplify the integration process, accelerating your development cycle, and freeing up your engineers for value-added innovation.

Trusted Sensor Readings (TSRs)

Use built-in Trusted Sensor Registers (TSRs) to verify sensor data integrity, ensuring critical sensor readings cannot be tampered with.

Establish trust in your IoT devices’ sensor data, enabling reliable decision-making and reducing vulnerability to cyberattacks and sensor spoofing.

Supply Chain & Device Provenance Security

Authenticate the integrity and authenticity of your devices throughout their lifecycle and across the supply chain using verifiable attestation and secure identity features.

Prevent device counterfeiting, unauthorized manufacturing, and supply chain infiltration, safeguarding brand reputation and customer trust.

Key Features

  • Reduce Silicon Footprint: Minimize silicon area and cost with a lightweight security IP block optimized for constrained microcontrollers and low-end SoCs
  • Accelerate Integration: Streamline secure boot and device attestation integration using straightforward APIs and standard interfaces, freeing engineers for core tasks
  • Meet Compliance Easily: Quickly achieve industry and regulatory security standards by integrating proven, standards-based (TCG MARS) root-of-trust capabilities
  • Future-Proof Security: Leverage evolving cryptographic standards and open specifications to ensure your embedded products stay secure and relevant long-term
  • Lower Overall Costs: Eliminate external TPMs and reduce complexity, lowering both development and Bill-of-Materials costs for embedded products
  • Secure by Design: Implement secure boot, firmware attestation, and sealed storage directly into your silicon, protecting devices against counterfeiting, tampering, and unauthorized firmware
  • SoC & ASIC Design Teams: Embedding root-of-trust directly into silicon designs without external TPMs.
  • Embedded Platform & Security Architects: Adding secure boot, attestation, and key protection to low-power MCUs.
  • OEMs & Product Companies:  Building smart sensors, medical devices, gateways, and other connected products that require hardware-level trust.
  • Compliance-Driven Teams: Meeting customer or regulatory requirements for attestation, firmware validation, and device integrity without complexity.

Benefits

  • Integration & Footprint
    • Estimated ~25k gates, optimized for low-area MCUs
    • Delivered as soft IP for rapid and flexible integration
    • No special processor modes or privilege levels required
  • Interfaces & Compatibility
    • Memory-mapped interfaces: APB, AXI, AHB-lite
    • Serial interfaces: SPI, UART
    • Firmware API compliant with TCG MARS command set (CBOR serialized)
  • Cryptographic Standards
    • Supports SHA-2, Ascon, and NIST – Hash/MAC/KDF
    • Compliant with TCG MARS 1.0 specification
    • Future-proof, cryptographically agile implementation
  • Operating Conditions
    • Ultra-low power optimized
    • Robust across typical IoT operating environments
    • Suitable for constrained embedded applications

Technical Specifications

×
Semiconductor IP