Visible to Intel only — GUID: pwy1616563378138
Ixiasoft
3.3.1. Configuration Bitstream Encryption Using the Programming File Generator Graphical Interface
3.3.2. Configuration Bitstream Encryption Using the Programming File Generator Command Line Interface
3.3.3. Partially Encrypted Configuration Bitstream Generation Using the Command Line Interface
3.3.4. Partial Reconfiguration Bitstream Encryption
4.1. Using SDM Provision Firmware
4.2. Authentication Root Key Provisioning
4.3. Using QSPI Factory Default Helper Image on Owned Devices
4.4. Programming Key Cancellation ID Fuses
4.5. Security Setting Fuse Provisioning
4.6. AES Root Key Provisioning
4.7. Converting Owner Root Key, AES Root Key Certificates, and Fuse files to Jam STAPL File Formats
Visible to Intel only — GUID: pwy1616563378138
Ixiasoft
3.2. Quartus Encryption Settings
To enable bitstream encryption for a design, you must specify the appropriate options using the Assignments > Device > Device and Pin Options > Security panel. You select the Enable configuration bitstream encryption checkbox, and the desired Encryption key storage location from the dropdown menu.
Figure 2. Intel® Quartus® Prime Encryption Settings
If you want to enable additional mitigations against side-channel attack vectors, you may enable the Encryption update ratio dropdown and Enable scrambling checkbox.