Secure boot sequence for selectively disabling configurable communication paths of a multiprocessor fabric

1. A system, comprising:

a multiprocessor fabric, wherein the multiprocessor fabric comprises a plurality of processors and a plurality of communication elements;

configuration logic, wherein the configuration logic is configured to:

receive a configuration for the multiprocessor fabric, wherein the configuration specifies disabling of communication paths between one or more of:

one or more processors and one or more communication elements;

one or more processors and one or more other processors; or

one or more communication elements and one or more other communication elements; and

perform a secure boot sequence automatically upon resetting or powering up the multiprocessor fabric, wherein the secure boot sequence includes automatically configuring the multiprocessor fabric to disable the communication paths specified by the configuration, wherein after said automatically configuring, the disabled communication paths are not restorable via software;

wherein, after said configuring, the multiprocessor fabric is configured to execute a software application, wherein the multiprocessor fabric operates according to the configuration.

2. The system of claim 1 , wherein the system is configured to:

store encrypted program code for at least a portion of the software application;

wherein, to perform the secure boot sequence, the configuration logic is configured to:

decrypt the encrypted program code; and

store the decrypted program code using a portion of the multiprocessor fabric;

wherein the disabled communication paths and specified prevent access to the decrypted program code by other portions of the multiprocessor fabric subsequent to the secure boot sequence; and

wherein executing the software application includes execution of at least a portion of the decrypted program code.

3. The system of claim 2 , wherein the system is configured to erase the stored decrypted program code in response to detecting tampering.

4. The system of claim 2 , wherein a key used to decrypt the encrypted program code is accessible only to the secure boot sequence.

5. The system of claim 2 , further comprising a hardware decryption engine configured to decrypt the encrypted program code.

6. The system of claim 1 , further comprising a non-volatile memory element configured to store instructions that specify the secure boot sequence.

7. The system of claim 6 , wherein the memory element is a one-time programmable memory element.

8. The system of claim 6 , wherein at least a portion of the instructions are encrypted, apparatus is configured to decrypt the portion of the instructions prior to performing the secure boot sequence.

9. The system of claim 6 , wherein the system is configured to authenticate the instructions prior to performing the secure boot sequence.

10. The system of claim 1 , wherein the automatic secure boot sequence prevents restoration of the disabled communications paths via a hardware reset.

11. A method for disabling communication paths in a multiprocessor fabric, the method comprising:

receiving a configuration for the multiprocessor fabric, wherein the multiprocessor fabric comprises a plurality of processors and a plurality of communication elements, wherein the configuration specifies disabling of communication paths between one or more of:

one or more processors and one or more communication elements;

one or more processors and one or more other processors; or

one or more communication elements and one or more other communication elements;

performing a secure boot sequence, wherein the secure boot sequence is performed automatically upon resetting or powering up the multiprocessor fabric and wherein the secure boot sequence includes automatically configuring the multiprocessor fabric to disable the communication paths specified by the configuration, wherein after said automatically configuring, the disabled communication paths are not restorable via software; and

operating the multiprocessor fabric to execute a software application, wherein the multiprocessor fabric operates according to the configuration.

12. The method of claim 11 , further comprising:

storing encrypted program code;

wherein the secure boot sequence includes:

decrypting the encrypted program code; and

storing the decrypted program code using a portion of the multiprocessor fabric;

wherein the disabled communication paths prevent access to the decrypted program code by other portions of the multiprocessor fabric subsequent to the secure boot sequence; and

wherein executing the software application includes execution of at least a portion of the decrypted program code.

13. The method of claim 12 , wherein the decrypting is performed by a hardware decryption engine.

14. The method of claim 11 , wherein the secure boot sequence is specified by instructions that are stored in a non-volatile memory element.

15. The method of claim 14 , wherein the memory element is a one-time programmable memory element.

16. The method of claim 15 , further comprising: configuring the secure boot sequence by writing to a non-written portion of the one-time programmable memory.

17. The method of claim 14 , wherein at least a portion of the instructions are encrypted, wherein the method includes decrypting the portion of the instructions prior to performing the secure boot sequence.

18. The method of claim 14 , further comprising authenticating the instructions prior to performing the secure boot sequence.

19. The method of claim 11 , wherein the automatic secure boot sequence prevents restoration of the disabled communication paths via a hardware reset.

20. The method of claim 11 , wherein the secure boot sequence is one of a plurality of secure boot sequences that are user selectable.