New ContributorErasing a Volatile Key from Arria-10 GX
Hello!
In one of our designs, we use the bitstream encryption feature in Arria-10 GX FPGA. We'd like to implement a kill switch (triggered by externally detected tampering).
Is it possible to erase (or perhaps program a fake one) volatile key programatically, i.e. from inside the design?
Such action should result in rendering the device unusable (unbootable), since the bitstream is encrypted and stored in the flash.
All I've found in the documentation, including AN556, is how to do this using JTAG. I presume it could also be done using Virtual JTAG, but maybe there's a simpler way?
Thanks in advance!
Pawel
Yes, that was my original question and the goal.
Ad 1. I've recently received some info on this subject from one of the FAE's, that's very much under NDA, regarding the use of the internal JTAG in the discussed topic. I hope I won't violate the NDA by saying this: It's not impossible.
Ad 2. That's a very good point. Removing the VCCBAT indeed causes the POR and needs to be extended by external logic, i.e. a monoflip. Having an external security controller, it's easy to implement.
That solves my question. Thank You a lot!
Pawel
