Forum Discussion

LowLevelGuy's avatar
LowLevelGuy
Icon for New Contributor rankNew Contributor
2 years ago
Solved

SDM based encryption?

For the Stratix 10, I see there is an encryption feature where the SDM decrypts the bitstream. Is there any possibility of using the SDM to support an encrypted FSBL? I’m basically interested in encry...
Hps Boot
  • FakhrulA_altera's avatar
    FakhrulA_altera
    2 years ago

    Hi LowLevelGuy,

    Apologies for the delay. I was consulting with the internal team to get clarification on this matter.

    When we enabling bitstream encryption on HPS FSBL (included the hex file in the PFG tool), FSBL will be encrypted as well.

    Sorry for the confusion.

    Thank you for your patience.

    Regards,

    Fakhrul

FakhrulA_altera's avatar
FakhrulA_altera
Icon for Regular Contributor rankRegular Contributor
2 years ago

Hi LowLevelGuy,


Sorry for the delay, I may overlooked your post. The Secure Device Manager (SDM) on the Stratix 10 can decrypt the FPGA bitstream, but it does not support decrypting an encrypted First Stage Boot Loader (FSBL). The SDM's encryption features are designed specifically for the FPGA configuration bitstream and not for general-purpose software decryption. For more detailed information, please refer to the Stratix® 10 Configuration User Guide.


Regards,

Fakhrul


  • LowLevelGuy's avatar
    LowLevelGuy
    Icon for New Contributor rankNew Contributor
    2 years ago

    Related to the FSBL part, just to make sure I understand your answer, does it mean that enabling "bitstream encryption" on -AS devices does not result in the FSBL being encrypted?

    By FSBL, I'm refering to the ".hex" file content specified using "-o hps_path" with quartus_pfg -- the first code executed by the HPS.

    Thanks