ALISO VIEJO, Calif., Jan. 3, 2013 /PRNewswire/ -- Microsemi Corporation (Nasdaq: MSCC), a leading provider of semiconductor solutions differentiated by power, security, reliability and performance, today announced a product demonstration through its continued relationship with Intrinsic-ID offering top-level security solutions for government applications.
Microsemi's WhiteboxCRYPTO ™ product is a software cryptography library generator that combines mathematical algorithms with data and code obfuscation techniques to transform a sensitive key in complex ways. This requires deep knowledge in multiple disciplines to attack. The WhiteboxCRYPTO-generated key is never present on disk or in memory, forcing an attacker to reverse engineer a complex library of executable code. WhiteboxCRYPTO comes in two crypto-algorithm variants: WhiteboxAES™ and WhiteboxRSA™.
Beyond simply protecting the cryptography operations in software, an application or key protected with WhiteboxCRYPTO can be bound to silicon by using the Intrinsic-ID Quiddikey ® product that is based on unique patented hardware intrinsic security (HIS) technology—also referred to as physical unclonable function (PUF)."Using hardware as a root of trust is a critical layer in any system security solution," said Michael Mehlberg, vice president of product management for Microsemi. "PUF is one of the strongest hardware identifiers available to bind software crypto keys to hardware. Quiddikey installs seamlessly in a Microsemi SmartFusion® programmable logic solution and strongly binds to a WhiteboxCRYPTO-protected key, forcing an attacker to peel back multiple complex layers of system security." The main advantages of the Quiddikey SRAM PUF technology come from the fact that SRAM is a standard library component, which is available in every technology node. Another differentiating feature of this security IP is flexible key management; secret keys can be programmed into Quiddikey in a personalization phase by any trusted party in the value chain. This does not necessarily have to be the semiconductor supplier.