Security User Guide: Intel® Programmable Acceleration Card with Intel® Arria® 10 GX FPGA

ID 683453
Date 3/06/2020
Document Table of Contents

1.4. Glossary

Table 2.  Glossary





Accelerator Functional Unit

Hardware Accelerator implemented in FPGA logic which offloads a computational operation for an application from the CPU to improve performance.


AFU Simulation Environment

Co-simulation environment that allows you to use the same host application and AF in a simulation environment. ASE is part of the Intel Acceleration Stack for FPGAs.

BIP Bitstream Authentication IP Module loaded into the Intel® Arria® 10 GX FPGA PR region that contains the cryptographic blocks necessary to perform bitstream authentication operations.
CCI-P Core Cache Interface

CCI-P is the standard interface AFUs use to communicate with the host.

CSK Code Signing Key A key used to validate integrity and authenticity of a block of code. Authenticity of this key is established through signing with a root key.
ECDSA Elliptical Curve Digital Signature Algorithm An algorithm based on elliptic curve cryptography to create signatures that can be used to evaluate the authenticity of an object.


FPGA Interface Unit

FIU is a platform interface layer that acts as a bridge between platform interfaces like PCIe* and AFU-side interfaces such as CCI-P.


FPGA Interface Manager

The FPGA functional block containing the FPGA Interface Unit (FIU) and external interfaces for memory, networking, etc.

The FIM may also be referred to as BBS (Blue-Bits, Blue Bit Stream) in the Acceleration Stack installation directory tree and in source code comments.

The Accelerator Function (AF) interfaces with the FIM at run time.

The FIM is provided with the Intel® PAC with Intel® Arria® 10 GX FPGA.

HSM Hardware Security Module A secure hardware device to hold, protect, and allow access to cryptographic objects; performs cryptographic operations in a trusted environment.
NIST p Curve National Institute of Standards and Technology prime Curve P256 is used throughout this document. Without any other associations added, P256 means NIST P256 curves, where p is a 256-bit prime.


Open Programmable Acceleration Engine

The OPAE is a software framework for managing and accessing AFs. 

PACSign PAC image signing tool A standalone tool to manage root entry hash bitstream creation, image signing, and cancellation bitstream creation
PKCS Public Key Cryptography Standard PKCS#11 is used throughout this document. PKCS#11 is a commonly used interface for commercial hardware security modules (HSMs).


Partial Reconfiguration

The ability to dynamically reconfigure a portion of an FPGA while the remaining FPGA design continues to function.

Root Key - A key designated as the primary, constant value for authentication. Typically only used to sign other keys, forming the root of all key chains.
RoT Root of Trust A source that can be trusted, such as the TCM in the Intel® FPGA PAC.
RSU Remote System Update Ability to update firmware and FPGA bitstreams over PCIe* .
SR Static Region Portion of the FPGA design that does not change. In the Intel® PAC with Intel® Arria® 10 GX FPGA, the static region is the FIM
TCM Trusted Control Module Functionality implemented in the SR of the Intel® PAC with Intel® Arria® 10 GX FPGA to manage the secure updates of BMC firmware, FIM updates, GBS updates, and key cancellation.