Intel® MAX® 10 FPGA Configuration User Guide

ID 683865
Date 3/27/2023
Document Table of Contents
Give Feedback

3.8. AES Encryption

Security Notice: The Intel® MAX® 10 devices use 128-bit encryption keys. For higher levels of security, Intel recommends that you select devices using longer key lengths such as Intel® Stratix® 10 or Intel Agilex® 7 devices, which use 256-bit encryption keys.

This section covers detailed guidelines on applying AES Encryption for design security.

There are two main steps in applying design security in Intel® MAX® 10 devices. First is to generate the encryption key programming (.ekp) file and second is to program the .ekp file into the device.

The .ekp file has other different formats, depending on the hardware and system used for programming. There are three file formats supported by the Intel® Quartus® Prime software:

  • JAM Byte Code (.jbc) file
  • JAM™ Standard Test and Programming Language (STAPL) Format (.jam) file
  • Serial Vector Format (.svf) file

Only the .ekp file type generated automatically from the Intel® Quartus® Prime software. You must create the .jbc, .jam and .svf files using the Intel® Quartus® Prime software if these files are required in the key programming.

Note: Intel recommends that you keep the .ekp file confidential.