Differences

This shows you the differences between two versions of the page.

--- en:ztex_boards:ztex_fpga_boards:bitstream_encryption [2013/11/26 11:34] – stefan
+++ en:ztex_boards:ztex_fpga_boards:bitstream_encryption [2016/09/11 10:51] – stefan
@@ Line 1: / Line 1: @@
 ====== Bitstream Encryption ======
-Several ZTEX FPGA Boards support Bitstream encryption, e.g.
+Several ZTEX FPGA Boards support Bitstream encryption, e.g. [[http://www.ztex.de/usb-fpga-2|USB-FPGA Modules 2.16, 2.13, 2.14 and 2.17]].
-[[http://www.ztex.de/usb-fpga-2/usb-fpga-2.16.e.html|USB-FPGA Modules 2.16]] and [[http://www.ztex.de/usb-fpga-1/usb-fpga-1.15y.e.html|1.15y]]
 The key which is used to decrypt the bitstream is stored in special low power memory of the FPGA which is powered by a battery. This battery is an option and not installed by default.
@@ Line 7: / Line 6: @@
 Using encrypted bitstreams is quite simple:
-  - Generate an encrypted bitstream. This is done using the ''bitgen'' option ''-g Encypt:Yes''. If no key (''-g KeyFile:<.nky file>'' paramter) is given, a key will be generated. The ''ucecho'' example for [[http://www.ztex.de/usb-fpga-2/usb-fpga-2.16.e.html|USB-FPGA Modules 2.16]] already contains encrypted bitstream (''fpag/ucecho-encrypted.bit'') and corresponding key file (''fpga/ucecho-encrypted.nky'').
+  - Generate an encrypted bitstream either (**ISE**) using the ''bitgen'' option ''-g Encypt:Yes'' and ''-g KeyFile:<.nky file>'' or (**Vivado**) using the constraints <code tcl>set_property BITSTREAM.ENCRYPTION.ENCRYPT Yes [current_design]
-  - Upload the key (.nky file) to the FPGA through JTAG using Xilinx Impact
+set_property BITSTREAM.ENCRYPTION.ENCRYPTKEYSELECT bbram [current_design]
-  - FPGA now accepts the encrypted bitstream
+set_property BITSTREAM.ENCRYPTION.KEYFILE <.nky file> [current_design]</code> If no key file (.nky file) is given a new one with random key is created.
+  - Upload the key (.nky file) to the FPGA through JTAG using Xilinx tools
+  - FPGA now accepts the encrypted bitstream (no special load technique is required but some options like bitstream compression may not work)