ice40 UltraPlus Image Sensor Elliptical Crypto Engine (ECC) Demo - Radiant Software User Guide

Transcription

1 ice40 UltraPlus Image Sensor Elliptical Crypto Engine (ECC) Demo - Radiant Software FPGA-UG Version 1.0 June 2018

2 Contents Acronyms in This Document Introduction Functional Description Demo Setup Configuring the MDP Board Setting Jumpers and Switches Programming SPI Flash on the MDP Board Installing the Software Package on the PC Running the ECC Encryption Demo Technical Support Assistance Revision History Figures Figure 2.1. ECC Demo Diagram... 4 Figure 3.1. MDP Board Configuration... 5 Figure 3.2. FT_PROG Shortcut... 6 Figure 3.3. Scan and Parse Device in FTDI FT_Prog Window... 7 Figure 3.4. Enable PORT-B UART Mode in FTDI FT_Prog Window... 7 Figure 3.5. Program Devices Window... 8 Figure 3.6. Radiant Programmer Getting Started Window... 9 Figure 3.7. Radiant Programmer Start Window Figure 3.8. Radiant Programmer Window Figure 3.9. Device Properties Windows Figure T+ SerialPort_WPF.exe File Figure Visual C++ Redistributable in Programs and Features Figure 4.1. T+ SerialPort_WPF GUI Main Window Tables Table 3.1. Detailed Information of the Board Configuration... 6 Table 3.2. Flash Memory Allocation... 9 All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 2 FPGA-UG

3 Acronyms in This Document A list of acronyms used in this document. Acronym Definition ECC FPGA MDP SPI USB Elliptic Curve Cryptography Field-Programmable Gate Array Mobile Development Platform Serial Peripheral Interface Universal Serial Bus All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

4 1. Introduction IoT devices, similarly to personal computers, are facing hacking attacks. Data captured by these devices can be sensitive and should be protected. Encryption techniques, such as Elliptic Curve Cryptography (ECC), provide the encryption and the decryption devices the ability to generate and share keys for private encrypted communication. 2. Functional Description This demo implements a soft ECC block within the ice40 Ultra Plus FPGA. This block uses AES 128 encryption, generates private and public keys and stores them in secure memory to support asymmetric secure encryption. Data captured by the FPGA from sensors can be securely transferred to PC through UART. Figure 2.1 shows the diagram of this ECC demo. The Crypto Engine in ice40 device is responsible for: ECC key pair generation, exchange, and decryption AES128 Encryption Volatile keys not accessible outside of engine Built-in API for key exchange and AES encryption Camera Sensor DVP video Interface ice40 Device Crypto Engine UART MCU/ Radio/ Modem Figure 2.1. ECC Demo Diagram All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 4 FPGA-UG

5 3. Demo Setup 3.1. Configuring the MDP Board Setting Jumpers and Switches Board reconfiguration is needed before running this demo. Figure 3.1 highlights (in orange boxes) all switches and jumpers needed to be verified or reconfigured on the Mobile Development Platform (MDP) board. J17 Pins 9-10 SW2 ON J25 Pins J19 Vertical Jumpers J23 Pins 2-3 SW5-1 ON SW5-2 ON J18 Pins 1-2 J28 Pins 1-2 J26 Pins 9-10 SW9 All set to off (down) J27 Pins 1-2 Pins 3-4 Pins 7-8 Figure 3.1. MDP Board Configuration All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

6 Table 3.1 lists the detailed information of these configurations on switches and jumpers. Table 3.1. Detailed Information of the Board Configuration Items Configuration Description J17, J26 Shunt pin 9-10 Disable ICE40UP5K_A/C devices. J25 Shunt pin Disable ICE40UP5K_B device. J27 Shunt pin 1-2,7-8 Enable ICE40UP5K_D device. Shunt pin 3-4 Provide power supply to camera sensor from USB cable. J28 Shunt pin 1-2 Board control, for programming SPI Flash. J19 Shunt pin 1-3,2-4 (vertical) Enable programming SPI Flash. J23 Shunt pin 2-3 Use Xtal U14 as clock source. SW2 Set to ON Power switch, slide down for power-on. SW5 All set to ON Select ICE40UP5K_D as target device. SW9 All set to OFF Remove BLE module from system SPI bus To enable PORT-B UART communication in FTDI chip: Download the FT_Prog tool from FT_PROG EEPROM Program Utility and install it. Once the installation is completed, the FT_Prog tool shortcut appears on the desktop as shown in Figure 3.2. Figure 3.2. FT_PROG Shortcut Connect the MDP board to the PC through the USB cable. Switch SW2 to ON. Double-click the FT_PROG shortcut to launch the tool. The FTDI FT_Prog window appears as shown in Figure 3.3. Select DEVICES > Scan and Parse to read out the configuration from U9 on the MDP board. All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 6 FPGA-UG

7 The main window is shown in Figure 3.4. Figure 3.3. Scan and Parse Device in FTDI FT_Prog Window Figure 3.4. Enable PORT-B UART Mode in FTDI FT_Prog Window Under Port B, choose Hardware and select RS232 UART under Property. Under Port B, choose Driver and select Virtual COM Port under Property. Note: If the RS232 UART and Virtual COM Port options are not available, select DEVICES > Program from the menu bar. In the Program Devices window, shown in Figure 3.5, click the Program button to write the new configuration. Unplug and replug the USB cable. Check Ports (COM&LPT) in the Device Manager window to confirm whether or not PORT B UART is enabled. All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

8 Figure 3.5. Program Devices Window All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 8 FPGA-UG

9 Programming SPI Flash on the MDP Board Use Radiant Programmer 1.0 (or higher) version to program the ice40 Ultra Plus designs. Lattice Semiconductor provides three bitstream files for this demo: crypto_ice40up_bit.bin irom_prog.hex drom_prog.hex All these bitstreams should be programmed in different areas in flash memory. The start address and end address for each bitstream file are listed in Table 3.2. Table 3.2. Flash Memory Allocation Bitstream File Start Address(Hex) End Address(Hex) crypto_ice40up_bit.bin 0x x irom_prog.hex 0x x drom_prog.hex 0x x To program SPI Flash on the MDP board: Connect the MDP board to the PC through the USB cable and power ON the MDP board. Start Radiant Programmer. From the Radiant Programmer Getting Started window (Figure 3.6. ), select Create a new project from a scan. Figure 3.6. Radiant Programmer Getting Started Window Click OK to start scanning. Radiant Programmer starts scanning as shown in Figure 3.7. All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

10 Figure 3.7. Radiant Programmer Start Window After scanning is completed, under Programming Speed Settings, select the Use custom Clock Divider and set the TCK Divider Setting (0-30x) value to 5. The values highlighted in orange in Figure 3.8 are displayed. Set Device Family to ice40 Ultra Plus and Device to ice40up5k. Figure 3.8. Radiant Programmer Window All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 10 FPGA-UG

11 From the menu bar, select Edit > Device Properties to open the Device Properties window. Apply the settings as shown in Figure 3.9. Target Memory: External SPI Flash Programming Port Interface: SPI Access mode: Direct Programming Operation: Erase, Program, Verify Figure 3.9. Device Properties Windows Programming File: load bitstream file crypto_ice40up_bitmap.bin. Family: SPI Serial Flash Vendor: Micron Device: SPI-M25P80 Load from File: set Start address (Hex) and End address (Hex) for bitstream file crypto_ice40up_bitmap.bin based on Table 3.2. Click OK to exit Device Properties dialog. There are three bitstream files for this demo. From the menu bar, select Edit > Add Device. Then repeat step 6 to step 8 for the other two bitstream files (irom_prog.hex and drom_prog.hex). From the menu bar, click Program Device in the Design tab. All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

12 3.2. Installing the Software Package on the PC Several software tool must be installed before running this demo. Install Python Download Python Install Python into its default directory, C:\Python27. Run Setup.exe provided by Lattice Semiconductor to install the GUI tool for this demo. The default installation directory is C:\Program Files (x86)\lattice Semiconductor\TP_crypto_GUI. After the installation, the following items are listed in the installation directory. Choose the T+ SerialPort_WPF.exe file to open the interface. Figure T+ SerialPort_WPF.exe File In Windows, select Control Panel > Programs and Features. Check whether or not Visual C++ Redistributable for Visual Studio 2012 Update 4 is installed. If not, download the executable software from and install it on your PC. Figure Visual C++ Redistributable in Programs and Features All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 12 FPGA-UG

13 4. Running the ECC Encryption Demo In the ECC Encryption demo design, the ice40 Ultra Plus device implements a soft cryptography block to secure targeted sensor data for IoT devices. To run the demo: Connect the MDP board to the PC. Switch SW2 to ON position to power ON the board. Run the exe file T+ SerialPort_WPF.exe to open the Serial Communication interface as shown in Figure 4.1. Select the COM Port and click Open. Note: Do not reset the Baudrate. Click Calibration. Figure 4.1. T+ SerialPort_WPF GUI Main Window A message prompts you to press the CRST button (SW4) to reset the MDP board. Once the calibration is finished, all radio buttons are enabled. Select one of the radio buttons. Click Execute to start the demo. For example, S+A Pic is the demo for secure session key exchange + AES of picture data. Select S+A Pic and then click Execute. By default, the operation is automatically executed ten times. This means that you will generate ten pictures. You can change the number of test (pictures in this case) by resetting the number above the Auto-test checkbox. This is line buffer-based, line by line capture and transfer. Therefore, the camera needs to be in a stable position when it is processing each frame. The left side image shows the encrypted image, while the right image is the decrypted one. All other brand or product names trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. FPGA-UG

14 Technical Support Assistance For assistance, submit a technical support case at Revision History Date Version Change Summary June Initial release. All other brand or product names are trademarks or registered trademarks of their respective holders. The specifications and information herein are subject to change without notice. 14 FPGA-UG

15 7 th Floor, 111 SW 5 th Avenue Portland, OR 97204, USA T