ROOT OF TRUST CHAIN AND UPDATABLE SECURITY FOR PROGRAMABLE LOGIC DEVICES, SYSTEMS, AND METHODS
Various techniques are provided for providing a root of trust chain, updating security protocols, and generating trusted customer configuration bitstreams for a programmable logic device (PLD). In one example, a method includes configuring hardware components of a PLD with an inherently trusted default set of operations immutably stored in a non-volatile memory and comprising a first root of trust for the PLD. The method also includes authenticating, by the hardware components configured with the default set of operations, a customer configuration bitstream comprising an updated set of operations. The method also includes reconfiguring the hardware components to replace the default set of operations with the updated set of operations if the authenticating is successful, wherein the updated set of operations comprise a second root of trust for the PLD. Additional devices, systems and methods are also provided.
1 . A method comprising:
configuring hardware components of a programmable logic device (PLD) with an inherently trusted default set of operations immutably stored in a non-volatile memory and comprising a first root of trust for the PLD;
authenticating, by the hardware components configured with the default set of operations, a customer configuration bitstream comprising an updated set of operations; and
reconfiguring the hardware components to replace the default set of operations with the updated set of operations if the authenticating is successful, wherein the updated set of operations comprise a second root of trust for the PLD.
2 . The method of claim 1 , wherein the authenticating comprises:
verifying the customer configuration bitstream comprises a trusted security block.
3 . The method of claim 2 , wherein:
the verifying comprises determining the customer configuration bitstream restricts access to the non-volatile memory by the hardware components.
4 . The method of claim 1 , wherein the authenticating comprises:
reading metadata associated with the customer configuration bitstream; and
confirming the metadata identifies that the customer configuration bitstream was previously authenticated.
5 . The method of claim 1 , wherein:
the customer configuration bitstream is a first customer configuration bitstream and the updated set of operations is a first updated set of operations; and
the method further comprises:
authenticating, by the hardware components configured with the first updated set of operations, a second customer configuration bitstream comprising
a second updated set of operations, and reconfiguring the hardware components with the second updated set of operations to replace the first updated set of operations in the hardware components, wherein the second updated set of operations comprise a third root of trust for the PLD.
6 . The method of claim 1 , the method further comprises:
further configuring the hardware components with an inherently trusted default set of security protocols stored in the non-volatile memory;
authenticating, by the hardware components configured with the default set of operations, an updated set of security protocols for the PLD; and
if the authenticating of the updated set of security protocols is successful:
replacing the default set of security protocols with the updated set of security protocols in the non-volatile memory, and
identifying the customer configuration bitstream as not authenticated.
7 . The method of claim 6 , further comprising:
reconfiguring the hardware components with the default set of operations;
further configuring the hardware components with the updated set of security protocols; and
reauthenticating, by the hardware components reconfigured with the default set of operations, the customer configuration bitstream.
8 . The method of claim 6 , wherein:
the default set of operations and the default set of security protocols are provided by a predetermined inherently trusted party; and
the default set of security protocols and the updated set of security protocols comprise cryptographic processes.
9 . A PLD comprising a field programmable gate array (FPGA) operable to perform the method of claim 1 .
10 . A method comprising:
configuring hardware components of a programmable logic device (PLD) with an inherently trusted default set of operations immutably stored in a non-volatile memory and comprising a first root of trust for the PLD;
further configuring the hardware components with an inherently trusted default set of security protocols stored in the non-volatile memory;
authenticating, by the hardware components configured with the default set of operations, an updated set of security protocols for the PLD; and
replacing the default set of security protocols with the updated set of security protocols in the non-volatile memory if the authenticating of the updated set of security protocols is successful.
11 . The method of claim 10 , further comprising:
identifying a customer configuration bitstream comprising an updated set of operations as not authenticated if the authenticating of the updated set of security protocols is successful.
12 . The method of claim 10 , further comprising:
authenticating, by the hardware components configured with the default set of operations, a customer configuration bitstream comprising an updated set of operations; and
reconfiguring the hardware components to replace the default set of operations with the updated set of operations if the authenticating of the customer configuration bitstream is successful, wherein the updated set of operations comprise a second root of trust for the PLD.
13 . The method of claim 12 , wherein the authenticating the customer configuration bitstream comprises:
verifying the customer configuration bitstream comprises a trusted security block.
14 . The method of claim 13 , wherein:
the verifying comprises determining the customer configuration bitstream restricts access to the non-volatile memory by the hardware components.
15 . The method of claim 12 , wherein the authenticating the customer configuration bitstream comprises:
reading metadata associated with the customer configuration bitstream; and
confirming the metadata identifies that the customer configuration bitstream was previously authenticated.
16 . The method of claim 12 , wherein:
the customer configuration bitstream is a first customer configuration bitstream and the updated set of operations is a first updated set of operations; and
the method further comprises:
authenticating, by the hardware components configured with the first updated set of operations, a second customer configuration bitstream comprising a second updated set of operations, and
reconfiguring the hardware components with the second updated set of operations to replace the first updated set of operations in the hardware components, wherein the second updated set of operations comprise a third root of trust for the PLD.
17 . The method of claim 10 , wherein:
the default set of operations and the default set of security protocols are provided by a predetermined inherently trusted party; and
the default set of security protocols and the updated set of security protocols comprise cryptographic processes.
18 . A PLD comprising a field programmable gate array (FPGA) operable to perform the method of claim 10 .
19 . A method comprising:
receiving a design for a programmable logic device (PLD);
adding a trusted security block to the design; and
generating a customer configuration bitstream for configuring hardware components of the PLD according to the design, wherein the customer configuration bitstream comprises:
an updated set of operations to replace an inherently trusted default set of operations immutably stored in a non-volatile memory and comprising a first root of trust for the PLD, and
the trusted security block to authenticate the customer configuration bitstream.
20 . The method of claim 19 , wherein:
the receiving, the adding, and the generating are performed by a first device different from the PLD; and
the method further comprises verifying, by a second device different from the first device and the PLD, that the customer configuration bitstream comprises the trusted security block.