SECURE DIGEST FOR PLD CONFIGURATION DATA
A method for verifying that data is correctly loaded into an individual programmable logic device includes computing a reference digest of the data to be loaded into the individual programmable logic device, loading the data into the individual programmable logic device, computing inside the individual programmable logic device an as-programmed digest of the data that was loaded into the individual programmable logic device, reading the as-programmed digest out of the individual programmable logic device, comparing the as-programmed digest with the reference digest, and verifying the loaded data if the as-programmed digest matches the reference digest, and indicating an error if the as-programmed digest does not match the reference digest.
1 . A method for verifying that data is correctly loaded into an individual programmable logic device, comprising:
computing a reference digest of at least a portion of the data for the individual programmable logic device;
loading the data into the individual programmable logic device;
computing inside the individual programmable logic device a device digest of the at least the portion of the data that was loaded into the individual programmable logic device;
reading the device digest out of the individual programmable logic device;
comparing the device digest with the reference digest; and
verifying the loaded data if the device digest matches the reference digest, and indicating an error if the device digest does not match the reference digest.
2 . The method of claim 1 wherein the portion comprises the complete data for the individual programmable logic device.
3 . The method of claim 1 , further including encrypting the device digest prior to reading the device digest out of the individual programmable logic device.
4 . The method of claim 1 wherein;
the data for the individual programmable logic device includes common configuration data and data unique to the individual programmable logic device;
computing a reference digest of the data to be loaded into the individual programmable logic device further includes computing a first partial reference digest of common configuration data to be loaded into the individual programmable logic device, and computing the reference digest by combining the first partial reference digest with information unique to the individual programmable logic device; and
computing inside the individual programmable logic device a device digest of the configuration data that was loaded into the individual programmable logic device includes computing a first partial device digest of the common configuration data that was loaded into the individual programmable logic device, and computing the device digest by combining the first partial device reference digest with information unique to the individual programmable logic device.
5 . The method of claim 4 wherein the data unique to the individual programmable logic device includes serial number data preprogrammed into the programmable logic device.
6 . The method of claim 4 wherein the common configuration data is the first part of the total data being computed into the reference digest and the data unique to the individual programmable logic device is the second part of the total data being computed into the reference digest.
7 . A method for verifying that at least a portion of the data stored in an individual programmable logic device has not become corrupted, comprising:
computing a reference digest of the at least a portion of the data stored in the individual programmable logic device;
computing inside the individual programmable logic device a current digest of the at least the portion of the data currently stored in the individual programmable logic device;
comparing the current digest with the reference digest; and
verifying the loaded data if the current digest matches the reference digest, and indicating the data has become corrupted if the current digest does not match the reference digest.
8 . The method of claim 7 wherein:
the individual programmable logic device includes common configuration data and data unique to the individual programmable logic device;
the computing of the reference digest further includes computing a reference digest of the common configuration data loaded into the individual programmable logic device combined with computing a reference digest of the data unique to the individual programmable logic device; and
computing the current digest of the configuration data loaded into the individual programmable logic device further includes computing a current digest of the current common configuration data loaded into the individual programmable logic device combined with computing a current digest of the data as-programmed unique to the individual programmable logic device.
9 . The method of claim 8 wherein the data unique to the individual programmable logic device includes serial number data preprogrammed into the programmable logic device.
10 . The method of claim 7 wherein the common configuration data is the first part of the total data being computed into the reference digest and the data unique to the individual programmable logic device is the second part of the total data being computed into the reference digest.
11 . The method of claim 7 , further including reading the as-programmed digest out of the individual programmable logic device.
12 . The method of claim 11 , further including encrypting the as-programmed digest prior to reading the as-programmed digest out of the individual programmable logic device.
13 . The method of claim 7 further including storing the reference digest in the programmable logic device.