Cryptographic key distribution

Abstract

An integrated-circuit device (1) comprises a processor (5), a hardware key-storage system (12), and a key bus (13). The hardware key-storage system (12) comprises a non-volatile key storage memory (12a), which includes a key register, for storing a cryptographic key, and an address register, for storing a destination memory address for the cryptographic key. The hardware key-storage system (12) further comprises output logic (12b) for sending the cryptographic key over the key bus (13) to the destination memory address, and write-once logic (12b) for preventing an address being written to theaddress register unless the address register is in an erased state.

Description

Background technique [0001] The present invention relates to apparatus and methods for protecting encryption key data within an integrated circuit device. [0002] To be effective, cryptographic techniques such as encryption, digital signature generation, message authentication, etc. usually rely on the secrecy of secret keys (symmetric encryption) or private keys (asymmetric encryption). The security of the encryption process is often compromised if the encryption key is known to an attacker or is publicly known. [0003] Therefore, it is important that embedded devices, such as integrated circuit devices, securely store and process encryption keys. [0004] arm TM TrustZone for Compatibility Arm TM The microcontroller provides two states of operation: secure and non-secure. Hardware logic in the bus fabric ensures that non-secure world components cannot store any secure world resources, thereby providing a secure perimeter around selected sensitive resources. Component...

AI Technical Summary

Problems solved by technology

However, such methods lack the flexibility

Images