English
You are here:
Software implementation for Hardware Root of Trust Software to Create, Wrap and Manage Keys
The accelerating expansion of the Internet of Things brings with it a comparably expanding threat model. The growing number of endpoints require strong identities as the foundation of trust to establish and scale robust security. BK is a secure root key generation and management software solution for IoT security that allows device manufacturers to secure their products with an internally generated, unique identity without the need for adding a costly, security-dedicated silicon. Since BK is a software implementation of SRAM PUF, it is the only hardware entropy source option for securing IoT products that does not need to be loaded at silicon fabrication. It can be installed later in the supply chain, and even remotely retrofitted on deployed devices. This enables a never-before-possible remote “brownfield” installment of a hardware root of trust and paves the way for scaling the IoT to billions of devices.
SRAM PUF has been deployed in Arm, Intel and RISC-V processor environments.
More than 300 million devices are secured with SRAM PUF.
SRAM PUF has been deployed in Arm, Intel and RISC-V processor environments.
More than 300 million devices are secured with SRAM PUF.
Features
- Low Cost, Flexible & Secure:
- This software-only product is easy to integrate and improves time to market. No need for additional or modified silicon. Wrapped keys can be stored securely in unprotected memory. BK works on all MCUs, CPUs and allows for brownfield deployments of hardware-based security.
- Operating Ranges: SRAM PUF responses have been qualified for use with BK over a wide operating range:
- Qualified top semiconductor fabs and technology nodes ranging from 350nm down to 5nm
- Semiconductor processes include low power, high speed and high density
- Temperature range from -55°C to 150°C [-67°F to 300°F]
- Voltage supply variation +/- 20%
- Lifetime > 25 years
Benefits
- Use standard SRAM
- Unclonable and immutable
- Device-unique high-quality keys
- No secrets when power is off
- No root key programming
- Flexible and scalable
Deliverables
- BK Software IP is delivered as a library compiled for a specific target chip, along with API specifications and user manual.
- BK software is available in different configurations and sizes. Contact Sales[@]Intrinsic-ID.com to learn more about BK configurations that might fit in your specific application. Some examples are:
- BK-Pro Device-unique key derivation, random number generation, key wrapping and management, elliptic curve-based public key crypto functions (ECDSA and ECDH), and optional public key infrastructure (PKI) elements such as certificate signing request (CSR)
- BK-Plus Device-unique key derivation, random number generation, application key wrapping and management
- BK-Safe Low footprint, device-unique key derivation and random number generation
Block Diagram of the Software implementation for Hardware Root of Trust Software to Create, Wrap and Manage Keys
View Software implementation for Hardware Root of Trust Software to Create, Wrap and Manage Keys full description to...
- see the entire Software implementation for Hardware Root of Trust Software to Create, Wrap and Manage Keys datasheet
- get in contact with Software implementation for Hardware Root of Trust Software to Create, Wrap and Manage Keys Supplier
IoT
- NB-IoT Protocol stack L2L3 and L1-Control and Service Layer
- NIST-Certified Random Number Generator, software-only implementation using SRAM start-up values as source of randomness
- Lens Distortion Correction (LDC) for Ultra-Wide Angle Lens & Fish-Eye Generation
- LTE-M(Cat-M) Protocol stack L2L3： 3GPP Release-14
- UMTS