Provide Chip Security Protection IP Cores: Cryptographic algorithm IP such as AES, DES, 3-DES, ECC, RSA, SM2, SM3, SM4, SHA1, SHA2, SHA3, HMAC, countermeasure IP such as TRNG, CTR-DRBG RNG, Digital Sensor, Active Shield, PUF, Smart Monitor, Scrambled Bus, Memory Ciphering, Cyber CPU, Secure Clock, Secure Book, Secure Monitor, Secure JTAG, etc.
Provide Chip Security testing solutions, which support side channel attack (voltage, current, electromagnetics) and fault injection attack (EM injection, Laser injection, Voltage glitch, Clock glitch, underfeeding).
Provide Chip Security simulation software, which support power trace simulation of Verilog/VHDL code on side channel attack and fault injection attack.
Provide Trusted Executed Environment compliance and security test software. And all other Globalplatform test suites.
Attacks on digital circuits can occur when an attacker attempts to physically alter the device's internal components. These types of attacks are known as intrusive and can include actions such as probing or manipulating signals, adding or removing components, or modifying features on the chip.
To counteract these threats, Secure-IC has developed the Active Shield technology. This technology uses a protective mesh layer over the sensitive parts of the circuit, and actively monitors the mesh integrity for any signs of tampering. This countermeasure helps to safeguard the circuit's features and components, such as metal routing and transistors, from unauthorized access or modification through the front side of the device.
In this day and age, attacks, bugs and vulnerabilities are very common in software and hardware such as buffer resources errors, cryptographic issues or code injection. Such vulnerabilities can then be exploited to cause damage to a device or software.
One of the biggest issues in cyber protection is called a “zero-day” vulnerability. It is a vulnerability that is only known to the defender or mitigated once it has been exploited, whereas the attacker knows it in advance and can exploit it in the meantime. The particularity of zero-day attacks is that they are impossible to predict and can be kept secret by their discoverers; they are therefore difficult to consider in threat analysis. Zero-day is most often used in software breaches to make the system execute arbitrary code, for example by jumping to an unauthorized memory section or inserting malicious code.
In cryptography, an attack can be performed by injecting one or several faults into a device thus disrupting the functional behavior of the device. Techniques commonly used to inject faults consist in introducing variations in the source voltage, clock frequency, temperature, or irradiating with a laser beam etc.
The True Random Number Generator is an essential silicon-proven digital IP core for all FPGA, ASIC and SoC designs that targets cryptographically secured applications. It is a digital source of entropy designed for compliance with the NIST-800-90B and AIS31. The IP Core successfully passed NIST-800-22, 90B and AIS31 test suites on the entropy source and it is compliant with the FIPS-140-2 validation.
Random number generation is critical for any secure device. Random numbers are used for key generation, key exchange, digital signature, encryption and more. Typical secure protocols like IPsec, MACsec, TLS/SSL or wireless use them during authentication/ key exchange and data streaming phases.
The true random number generator includes conditioning function and health tests as defined in the NIST 800-90B and AIS31. Convenient AMBA APB interface is used for both control and data transfer.
A Physically Unclonable Function (PUF) is a security mechanism that uses the inherent physical variations of a device to generate a unique, unclonable output. This output can be used as a cryptographic key or a device identifier. PUFs rely on the fact that the exact physical properties of a device, such as the physical and electrical characteristics on a chip, can never be replicated exactly. This makes PUFs a highly secure method for protecting sensitive information and ensuring device authenticity. PUFs are often used in a wide range of applications, including secure boot, secure storage, and secure key generation. This PQC ready PUF IP Core is compliant with ISO/IEC 20897 where Secure-IC has been the lead party for PUF quality test standard, thus making it the easiest technology to use on the market and the most reliable (with no need to make a testchip before). In addition it can be used in any technology node and foundry.
PUF IP Core is a secret key generation system based on Physically Unclonable Functions (PUF). The secret key is extracted by the PUF from the silicon by using its inherent properties: technological dispersions are amplified into digital signals (bits of information). The key generated by the PUF is not readable but extracted using a group of helper-data. This distinctive feature allows a real protection against the reverse-engineering techniques compared to traditional methods that store the key in non-volatile memory.
Security Silicon IP are low-level pieces of code that will be embedded in an integrated circuit to ensure security functions. IP cores address the physical security of the components and represent true security solutions for a wide variety of markets.
Depending on customers’ need, Secure-IC can deliver Silicon-proven IP (TSMC, GF, Samsung, SMIC, HH GRACE, ST, UMC, MAGNACHIPS) in advanced technology nodes (130nm, 65nm, 55nm, 40nm, 28nm, 16nm, 12nm, 10nm, 7nm, 5nm) in the form of a hardware IP core (tailored to a particular foundry) and a related software IP core (in the form of RTL code).
Analyzr With the arrival of the intelligent era, embedded systems as the carrier of the Internet of Things, car networking, artificial intelligence, cloud computing, electronic payment will be more and more into people's lives and greatly improve people's lives. However, with the popularization and application of embedded systems, their security is also threatened more and more. At the present stage, the most advanced threats to embedded system chip are bypass attacks, fault injection and hardware Trojans. Secure-IC offers a full suite of solutions to these security challenges.
Virtualyzr Virtualyzr™ facilitate your security evaluation with specifically Hardware Design verification tools.
Catalyzr Assessing the security of software is as important as assessing the security of hardware. Software is complex and can sometime be easily breached. That is why risk assessment is a must when evaluating the security of a software implementation.
Secure-IC designed different security IP cores for different security risk loopholes.
Secure-IC sells IP cores based on customer requirements, according to different levels of license for sale, including from the initial step to all the source code to varying degrees.
Secure-IC provide various security IP cores as following list (keep updating).
| AES | Encryption, against Side-Channel Attacks |
| DES / 3-DES | Encryption, against Side-Channel Attacks |
| RSA | Encryption, against Side-Channel Attacks |
| ECC | Encryption, against Side-Channel Attacks |
| HASH (SHA-1/MD-5) | Encryption, against Side-Channel Attacks |
| SM2 | Encryption, against Side-Channel Attacks |
| SM3 | Encryption, against Side-Channel Attacks |
| SM4 | Encryption, against Side-Channel Attacks |
| TRNG | True Random Number Generator，Digital，against Harmonic EM Attacks |
| PUF | Digital, Anti Cloning/Counterfeiting，100% Unique, Random and Steady ID Generation |
| Digital Sensor | Anti Fault Injection Attacks, All-in-one Fault Injection Detector, Entirely Digital |
| Active Shield | Active Protection against Intrusive Attacks on ASIC, Anti Intrusive Hardware Modification. |
| Scrambled BUS | Encrypted Information to Prevent Probing on BUS, Anti Eavesdroping |
| Memory Ciphering | Memory Protection Against Reverse Engineering and Tampering |
| Secure Clock | Anti Synchronization to prevent efficient SCA and FIA |
| Secure JTAG | Authentication System to Secure the debugging channel on chip, Anti JTAG Violation |
| Secure Boot | Maximum security-enabling root-on-trust, Anti Firmware Tampering |
| Secure Monitor | Maximum security-enabling monitoring, Security policy bypass |
| CyberCPU CPU | CPU-agnostic Cyber Attack Sensor |
