de     

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revisionBoth sides next revision
en:ztex_boards:ztex_fpga_boards:bitstream_encryption [2013/11/26 11:34] stefanen:ztex_boards:ztex_fpga_boards:bitstream_encryption [2014/07/15 21:42] stefan
Line 1: Line 1:
 ====== Bitstream Encryption ====== ====== Bitstream Encryption ======
-Several ZTEX FPGA Boards support Bitstream encryption, e.g.  +Several ZTEX FPGA Boards support Bitstream encryption, e.g. USB-FPGA Modules 2.16, 2.13 and 1.15y.
-[[http://www.ztex.de/usb-fpga-2/usb-fpga-2.16.e.html|USB-FPGA Modules 2.16]] and [[http://www.ztex.de/usb-fpga-1/usb-fpga-1.15y.e.html|1.15y]]+
  
 The key which is used to decrypt the bitstream is stored in special low power memory of the FPGA which is powered by a battery. This battery is an option and not installed by default. The key which is used to decrypt the bitstream is stored in special low power memory of the FPGA which is powered by a battery. This battery is an option and not installed by default.
Line 7: Line 6:
 Using encrypted bitstreams is quite simple: Using encrypted bitstreams is quite simple:
  
-  - Generate an encrypted bitstream. This is done using the ''bitgen'' option ''-g Encypt:Yes''. If no key (''-g KeyFile:<.nky file>'' paramter) is givenkey will be generated. The ''ucecho'' example for [[http://www.ztex.de/usb-fpga-2/usb-fpga-2.16.e.html|USB-FPGA Modules 2.16]] already contains encrypted bitstream (''fpag/ucecho-encrypted.bit'') and corresponding key file (''fpga/ucecho-encrypted.nky'').+  - Generate an encrypted bitstream either  
 +    - (**ISE only**:using the ''bitgen'' option ''-g Encypt:Yes'' and ''-g KeyFile:<.nky file>'' or 
 +    - (**Vivado only:**) using the constraints <code>''set_property BITSTREAM.ENCRYPTION.ENCRYPT Yes [current_design]'' 
 +''set_property BITSTREAM.ENCRYPTION.ENCRYPTKEYSELECT bbram [current_design] 
 +''set_property BITSTREAM.ENCRYPTION.KEYFILE <.nky file> [current_design]''</code> If no key file (.nky file) is given a new one with random kay is created. The ''ucecho'' example for USB-FPGA Modules 2.16 and 2.13 already contains encrypted bitstreams (''ucecho-encrypted.bit'') and corresponding key file (''ucecho-encrypted.nky'').
   - Upload the key (.nky file) to the FPGA through JTAG using Xilinx Impact   - Upload the key (.nky file) to the FPGA through JTAG using Xilinx Impact
   - FPGA now accepts the encrypted bitstream   - FPGA now accepts the encrypted bitstream
  
 
en/ztex_boards/ztex_fpga_boards/bitstream_encryption.txt · Last modified: 2016/11/24 23:29 by stefan
 
Recent changes RSS feed Creative Commons License Powered by PHP Debian Driven by DokuWiki
[ZTEX Home] [Imprint] [Privacy policy]