Intel Agilex® 7 Device Security User Guide

Download PDF
ID 683823
Date 7/07/2023
Public
Document Table of Contents
Document Table of Contents x
1. Intel Agilex® 7 Device Security Overview 2. Authentication and Authorization 3. AES Bitstream Encryption 4. Device Provisioning 5. Advanced Features 6. Troubleshooting 7. Intel Agilex® 7 Device Security User Guide Archives 8. Revision History for the Intel Agilex® 7 Device Security User Guide
1. Intel Agilex® 7 Device Security Overview x
1.1. Commitment to Product Security 1.2. Available Security Documentation
2. Authentication and Authorization x
2.1. Creating a Signature Chain 2.2. Signing a Configuration Bitstream
2.1. Creating a Signature Chain x
2.1.1. Creating Authentication Key Pairs on the Local File System 2.1.2. Creating Authentication Key Pairs in SoftHSM 2.1.3. Creating the Signature Chain Root Entry 2.1.4. Creating a Signature Chain Public Key Entry
2.2. Signing a Configuration Bitstream x
2.2.1. Quartus Key File Assignment 2.2.2. Co-Signing SDM Firmware 2.2.3. Signing Configuration Bitstream Using the quartus_sign Command 2.2.4. Partial Reconfiguration Multi-Authority Support 2.2.5. Verifying Configuration Bitstream Signature Chains
3. AES Bitstream Encryption x
3.1. Creating the AES Root Key 3.2. Quartus Encryption Settings 3.3. Encrypting a Configuration Bitstream
3.3. Encrypting a Configuration Bitstream x
3.3.1. Configuration Bitstream Encryption Using the Programming File Generator Graphical Interface 3.3.2. Configuration Bitstream Encryption Using the Programming File Generator Command Line Interface 3.3.3. Partially Encrypted Configuration Bitstream Generation Using the Command Line Interface 3.3.4. Partial Reconfiguration Bitstream Encryption
4. Device Provisioning x
4.1. Using SDM Provision Firmware 4.2. Using QSPI Factory Default Helper Image on Owned Devices 4.3. Authentication Root Key Provisioning 4.4. Programming Key Cancellation ID Fuses 4.5. Canceling Root Keys 4.6. Programming Counter Fuses 4.7. Secure Data Object Service Root Key Provisioning 4.8. Security Setting Fuse Provisioning 4.9. AES Root Key Provisioning 4.10. Converting Owner Root Key, AES Root Key Certificates, and Fuse files to Jam STAPL File Formats
4.3. Authentication Root Key Provisioning x
4.3.1. Partial Reconfiguration Multi-Authority Root Key Programming
4.9. AES Root Key Provisioning x
4.9.1. AES Root Key Compact Certificate 4.9.2. Intrinsic ID® PUF AES Root Key Provisioning 4.9.3. Black Key Provisioning
4.9.2. Intrinsic ID® PUF AES Root Key Provisioning x
4.9.2.1. Intrinsic ID PUF Enrollment 4.9.2.2. Wrapping the AES Root Key 4.9.2.3. Programming Helper Data and Wrapped Key to QSPI Flash Memory 4.9.2.4. Querying Intrinsic ID PUF Activation Status 4.9.2.5. Location of the PUF in Flash Memory
4.9.3. Black Key Provisioning x
4.9.3.1. Black Key Provisioning Options
5. Advanced Features x
5.1. Secure Debug Authorization 5.2. HPS Debug Certificates 5.3. Platform Attestation 5.4. Physical Anti-Tamper 5.5. Using Design Security Features with Remote System Update 5.6. SDM Cryptographic Services 5.7. Bitstream Security Settings
5.4. Physical Anti-Tamper x
5.4.1. Anti-Tamper Responses 5.4.2. Anti-Tamper Detection 5.4.3. Anti-Tamper Lite Intel® FPGA IP
5.4.3. Anti-Tamper Lite Intel® FPGA IP x
5.4.3.1. Release Information
5.6. SDM Cryptographic Services x
5.6.1. Vendor Authorized Boot 5.6.2. Secure Data Object Service 5.6.3. SDM Cryptographic Primitive Services
5.7. Bitstream Security Settings x
5.7.1. Selecting and Enabling Security Options
6. Troubleshooting x
6.1. Using Quartus Commands in a Windows Environment Error 6.2. Generating a Private Key Warning 6.3. Adding a Signing Key to the Quartus Project Error 6.4. Generating Quartus Prime Programming File was Unsuccessful 6.5. Unknown Argument Errors 6.6. Bitstream Encryption Option Disabled Error 6.7. Specifying Correct Path to the Key 6.8. Using Unsupported Output File Type
1. Intel Agilex® 7 Device Security Overview
2. Authentication and Authorization
3. AES Bitstream Encryption
4. Device Provisioning
5. Advanced Features
6. Troubleshooting
7. Intel Agilex® 7 Device Security User Guide Archives
8. Revision History for the Intel Agilex® 7 Device Security User Guide

2.2.5. Verifying Configuration Bitstream Signature Chains

After you create signature chains and signed bitstreams, you may verify that a signed bitstream correctly configures a device programmed with a given root key. You first use the fuse_info operation of the quartus_sign command to print the hash of the root public key to a text file: 
quartus_sign --family=agilex --operation=fuse_info root0.qky hash_fuse.txt
You then use the check_integrity option of the quartus_pfg command to inspect the signature chain on each section of a signed bitstream in .rbf format. The check_integrity option prints the following information:
  • Status of the overall bitstream integrity check
  • Contents of each entry in each signature chain attached to each section in the bitstream .rbf file,
  • Expected fuse value for the hash of the root public key for each signature chain.
The value from the fuse_info output should match the Fuse lines in the check_integrity output. 
quartus_pfg --check_integrity signed_bitstream.rbf
Here is an example of the check_integrity command output: 
Info: Command: quartus_pfg --check_integrity signed_bitstream.rbf
Integrity status: OK

Section
Type: CMF
Signature Descriptor ...
Signature chain #0 (entries: -1, offset: 96)
Entry #0
Fuse: 34FD3B5F 7829001F DE2A24C7 3A7EAE29 C7786DB1 D6D5BC3C 52741C79
      72978B22 0731B082 6F596899 40F32048 AD766A24
Generate key ...
Curve : secp384r1
X     : 29C39C3064AE594A36DAA85602D6AF0B278CBB0B207C4D97CFB6967961E5F0ECA
        456FF53F5DBB3A69E48A042C62AB6B0
Y     : 3E81D40CBBBEAC13601247A9D53F4A831308A24CA0BDFFA40351EE76438C7B5D2
        2826F7E94A169023AFAE1D1DF4A31C2
Generate key ...
Curve : secp384r1
X     : 29C39C3064AE594A36DAA85602D6AF0B278CBB0B207C4D97CFB6967961E5F0ECA
        456FF53F5DBB3A69E48A042C62AB6B0
Y     : 3E81D40CBBBEAC13601247A9D53F4A831308A24CA0BDFFA40351EE76438C7B5D2
        2826F7E94A169023AFAE1D1DF4A31C2

Entry #1
Generate key ...
Curve : secp384r1
X     : 015290C556F1533E5631322953E2F9E91258472F43EC954E05D6A4B63D611E04B
        C120C7E7A744C357346B424D52100A9
Y     : 68696DEAC4773FF3D5A16A4261975424AAB4248196CF5142858E016242FB82BC5
        08A80F3FE7F156DEF0AE5FD95BDFE05

Entry #2
Keychain permission: SIGN_CODE
Keychain can be cancelled by ID: 3
Signature chain #1 (entries: -1, offset: 648)

Entry #0
Fuse: FA6528BE 9281F2DB B787E805 6BF6EE0E 28983C56 D568B141 8EEE4BF6
      DAC2D422 0A3A0F27 81EFC6CD 67E973BF AC286EAE
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD

Entry #1
Generate key ...
Curve : secp384r1
X     : 1E8FBEDC486C2F3161AFEB028D0C4B426258293058CD41358A164C1B1D60E5C1D
        74D982BC20A4772ABCD0A1848E9DC96
Y     : 768F1BF95B37A3CC2FFCEEB071DD456D14B84F1B9BFF780FC5A72A0D3BE5EB51D
        0DA7C6B53D83CF8A775A8340BD5A5DB

Entry #2
Generate key ...
Curve : secp384r1
X     : 13986DDECAB697A2EB26B8EBD25095A8CC2B1A0AB0C766D029CDF2AFE21BE3432
        76896E771A9C6CA5A2D3C08CF4CB83C
Y     : 0A1384E9DD209238FF110D867B557414955354EE6681D553509A507A78CFC05A1
        49F91CABA72F6A3A1C2D1990CDAEA3D

Entry #3
Keychain permission: SIGN_CODE
Keychain can be cancelled by ID: 15
Signature chain #2 (entries: -1, offset: 0)
Signature chain #3 (entries: -1, offset: 0)
Signature chain #4 (entries: -1, offset: 0)
Signature chain #5 (entries: -1, offset: 0)
Signature chain #6 (entries: -1, offset: 0)
Signature chain #7 (entries: -1, offset: 0)

Section
Type: IO
Signature Descriptor ...
Signature chain #0 (entries: -1, offset: 96)

Entry #0
Fuse: FA6528BE 9281F2DB B787E805 6BF6EE0E 28983C56 D568B141 8EEE4BF6 
      DAC2D422 0A3A0F27 81EFC6CD 67E973BF AC286EAE
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD

Entry #1
Generate key ...
Curve : secp384r1
X     : 646B51F668D8CC365D72B89BA8082FDE79B00CDB750DA0C984DC5891CDF57BD21
        44758CA747B1A8315024A8247F12E51
Y     : 53513118E25E16151FD55D7ECDE8293AF6C98A74D52E0DA2527948A64FABDFE7C
        F4EA8B8E229218D38A869EE15476750

Entry #2
Generate key ...
Curve : secp384r1
X     : 13986DDECAB697A2EB26B8EBD25095A8CC2B1A0AB0C766D029CDF2AFE21BE3432
        76896E771A9C6CA5A2D3C08CF4CB83C
Y     : 0A1384E9DD209238FF110D867B557414955354EE6681D553509A507A78CFC05A1
        49F91CABA72F6A3A1C2D1990CDAEA3D

Entry #3
Keychain permission: SIGN_CORE
Keychain can be cancelled by ID: 15
Signature chain #1 (entries: -1, offset: 0)
Signature chain #2 (entries: -1, offset: 0)
Signature chain #3 (entries: -1, offset: 0)
Signature chain #4 (entries: -1, offset: 0)
Signature chain #5 (entries: -1, offset: 0)
Signature chain #6 (entries: -1, offset: 0)
Signature chain #7 (entries: -1, offset: 0)

Section
Type: HPS
Signature Descriptor ...
Signature chain #0 (entries: -1, offset: 96)
Entry #0
Fuse: FA6528BE 9281F2DB B787E805 6BF6EE0E 28983C56 D568B141 8EEE4BF6 
      DAC2D422 0A3A0F27 81EFC6CD 67E973BF AC286EAE
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD

Entry #1
Generate key ...
Curve : secp384r1
X     : FAF423E08FB08D09F926AB66705EB1843C7C82A4391D3049A35E0C5F17ACB1A30
        09CE3F486200940E81D02E2F385D150
Y     : 397C0DA2F8DD6447C52048CD0FF7D5CCA7F169C711367E9B81E1E6C1E8CD9134E
        5AC33EE6D388B1A895AC07B86155E9D

Entry #2
Generate key ...
Curve : secp384r1
X     : 13986DDECAB697A2EB26B8EBD25095A8CC2B1A0AB0C766D029CDF2AFE21BE3432
        76896E771A9C6CA5A2D3C08CF4CB83C
Y     : 0A1384E9DD209238FF110D867B557414955354EE6681D553509A507A78CFC05A1
        49F91CABA72F6A3A1C2D1990CDAEA3D

Entry #3
Keychain permission: SIGN_HPS
Keychain can be cancelled by ID: 15
Signature chain #1 (entries: -1, offset: 0)
Signature chain #2 (entries: -1, offset: 0)
Signature chain #3 (entries: -1, offset: 0)
Signature chain #4 (entries: -1, offset: 0)
Signature chain #5 (entries: -1, offset: 0)
Signature chain #6 (entries: -1, offset: 0)
Signature chain #7 (entries: -1, offset: 0)

Section
Type: CORE
Signature Descriptor ...
Signature chain #0 (entries: -1, offset: 96)

Entry #0
Fuse: FA6528BE 9281F2DB B787E805 6BF6EE0E 28983C56 D568B141 8EEE4BF6 
      DAC2D422 0A3A0F27 81EFC6CD 67E973BF AC286EAE
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD
Generate key ...
Curve : secp384r1
X     : 47A453474A8D886AB058615EB1AB38A75BAC9F0C46E564CB5B5DCC1328244E765
        0411C4592FAFFC71DE36A105B054781
Y     : 6087D3B4A5C8646B4DAC6B5C863CD0E705BD0C9D2C141DE4DE7BDDEB85C0410D8
        6B7312EEE8241189474262629501FCD

Entry #1
Generate key ...
Curve : secp384r1
X     : 646B51F668D8CC365D72B89BA8082FDE79B00CDB750DA0C984DC5891CDF57BD21
        44758CA747B1A8315024A8247F12E51
Y     : 53513118E25E16151FD55D7ECDE8293AF6C98A74D52E0DA2527948A64FABDFE7C
        F4EA8B8E229218D38A869EE15476750

Entry #2
Generate key ...
Curve : secp384r1
X     : 13986DDECAB697A2EB26B8EBD25095A8CC2B1A0AB0C766D029CDF2AFE21BE3432
        76896E771A9C6CA5A2D3C08CF4CB83C
Y     : 0A1384E9DD209238FF110D867B557414955354EE6681D553509A507A78CFC05A1
        49F91CABA72F6A3A1C2D1990CDAEA3D

Entry #3
Keychain permission: SIGN_CORE
Keychain can be cancelled by ID: 15
Signature chain #1 (entries: -1, offset: 0)
Signature chain #2 (entries: -1, offset: 0)
Signature chain #3 (entries: -1, offset: 0)
Signature chain #4 (entries: -1, offset: 0)
Signature chain #5 (entries: -1, offset: 0)
Signature chain #6 (entries: -1, offset: 0)
Signature chain #7 (entries: -1, offset: 0)
Level Two Title