Lattice Semiconductor MachXO3D™ FPGAs
Lattice Semiconductor MachXO3D™ FPGAs are the next generation of low-density PLDs, including enhanced security features and on-chip dual boot flash. The MachXO3D FPGAs enhance secure control applications with hardware Root-of-Trust and dual boot capabilities. The MachXO3D simplifies the implementation of comprehensive, flexible, and robust hardware security throughout the product lifecycle. This customizable approach allows implementation with a wide range of system architectures.
The MachXO3D FPGAs have many robust security features, such as detecting cryptographically and preventing a boot from malicious code. The on-device configuration flash enables dual boot, eliminating the need for external memory. The hardened device configuration engine ensures only FPGA configurations from a trusted source can be installed. The MachXO3D devices also provide a flexible, reliable, and secure configuration from on-chip Flash with encryption and authentication options.
The Lattice Semiconductor MachXO3D complies with NIST SP 800 193 Platform Firmware Resiliency (PFR) guidelines. The MachXO3D are available in two performance levels, the ultra-low power (ZC) or the high performance (HC). The MachXO3D PLDs are available in a broad range of advanced halogen-free packages, ranging from the space-saving 10 x 10mm QFN to the 19 x 19mm caBGA. MachXO3D devices support density migration within the same package.
Features
- Simplifies implementation of hardware security by integrating Root-of-Trust in your platform’s first on, last off device
- Supports security throughout the product lifecycle, including device manufacturing and transport, platform manufacturing, installation, operation, and decommissioning
- Enables comprehensive protection against a variety of threats by providing data security, equipment security, data authentication, design security, and brand protection
- Programmable logic combined with a secure dual boot configuration block provides flexibility during design implementation and enables secure updates after equipment deployment
- Delivers robust security and pre-verified cryptographic functions compliant with NIST SP 800-193 PFR and CAVP guidelines to protect non-volatile memory, detect malicious code, and recover in case of corruption
Applications
- Secure boot and Root of Trust
- Consumer electronics
- Compute and storage
- Wireless communications
- Industrial control systems
- Automotive system
Videos
Secure Control PLD Diagram
• Enhances secure control PLD functionality with dual boot and hardware root-of-trust
Chain of Trust Diagram
• Hardware Root-of-Trust is the first link in the chain of trust that protects entire systems
• Hardened device configuration engine cryptographically authenticates MachXO3D’s configuration image at power-on
• Embedded security block provides cryptographic functions to authenticate other platform firmware at power-on
• With instant-on capability, MachXO3D is the first device to boot up securely on the platform and, as such, is an excellent anchor for the Chain of Trust
Secure Server Diagram
• Hardened secure configuration block enables MachXO3D to protect, detect and recover itself from malicious attacks
• FPGA fabric enables parallel processing capability to protect, detect and recover multiple platform firmware at the same time
• Compliant with NIST SP 800 193 Platform Firmware Resiliency (PFR) guidelines