xilsecure
Introduction
...
How to enable
...
Features Supported
- SHA
- SHA3
- Hash of 384 bit output using SHA-3 hardware engine.
- By default uses NIST SHA3 padding
- User can choose for Keccak SHA3 padding by calling XSecure_Sha3PadSelection() API after XSecure_Sha3Initialize().
- SHA2
- Hash of 256 bit output using SHA-2 software algorithm.
- SHA3
- AES-GCM
- Encryption or decryption of the data is done using AES engine
- Operation using KUP or device key (256 bit) and IV(96bit)
- Encryption and decryption of word aligned data. ()
- While encryption GCM tag is appended to encrypted data.
- GCM tag matching is checked while decryption of the data.(GCM tag should be provided explicitly)
- Decryption of boot image partition(Created by bootgen provided by Xilinx)
- Supports operational key.
- Support for key rolling enabled partition.
- Checks for GCM tag matching.
- RSA- hardware accelerator
- Supports for RSA-4096 and RSA-2048 key sizes
- RSA encryption with public key, where padding should be taken care by application
- RSA decryption with private key, where padding should be taken care by application
- Inputs are key parameters modulus, exponent and exponentiation values.
Features not supported
...
...
- Supports only word aligned data and each update should not be more than 512MB
...
- RSA 3072
Test Cases:
...
Documentation:
...