StealthAES Architecture
Streamlined AXI4-Stream interface with isolated key loading and optional key storage for simple key agility
Industry-Leading AES-GCM Encryption IP With Advanced Side-Channel Countermeasures
Delivering optimal balance of area efficiency, throughput, and security with state-of-the-art protection against side-channel attacks for high-security FPGA and ASIC designs.
Streamlined AXI4-Stream interface with isolated key loading and optional key storage for simple key agility
Complete AES-GCM implementation with 256-bit keys providing both encryption and authentication in a single, efficient operation.
Proprietary, extensively tested countermeasures deliver maximum resistance to power and electromagnetic attacks while minimizing area and frequency impact.
Straightforward AXI4-Stream interface for data transfer with isolated key loading port and optional key storage for simple key agility. Optional scatter-gather DMA support for efficient memory operations.
Rigorously tested and verified compliance with NIST cryptographic standards ensuring reliable and trusted security implementation.
Tailored integrations available including custom support for PCIe interfaces, DMA, and packet processing to meet specific design requirements. Optional keystore provides secure key management with key slot referencing for enhanced key agility.
Designed for seamless integration into existing designs with comprehensive documentation and expert integration support.
| FPGA Platform | Max Frequency | AES-256 GCM Performance | Area (LUTs) |
|---|---|---|---|
| AMD UltraScale+ and Versal | 200 MHz | 1.6 Gbps | 8K LUTs |
| AMD UltraScale+ and Versal | 200 MHz | 10 Gbps | 36K LUTs |
| Microchip PolarFire | 100 MHz | 0.8 Gbps | 13K LUTs |
| Microchip PolarFire | 100 MHz | 5 Gbps | 58K LUTs |
| Intel Agilex 5 | 180 MHz | 1.5 Gbps | 9K LUTs |
| Intel Agilex 5 | 180 MHz | 9 Gbps | 44K LUTs |
Note: Performance numbers shown are example configurations. StealthAES is available in higher-performance configurations to meet your design requirements.
StealthCores has verified StealthAES side-channel countermeasures with over 1 billion encryption operation measurements, achieving more than 10 million times improvement in side-channel security compared to non-countermeasure designs.
Verification processes utilize industry-standard Test Vector Leakage Analysis (TVLA) and template attack testing, ensuring resistance to both power and electromagnetic leakage.
Rigorously tested using target boards specifically designed for side-channel power analysis as well as EM analysis using FPGA vendor development kits.
Data acquisition performed at 500 MHz bandwidth and up to 5 GS/s sampling rates to ensure even high-frequency leakage is detected and mitigated.
Rigorously tested countermeasures validated across 1 billion+ operations using industry-standard TVLA combined with template attack analysis, achieving industry-leading side-channel attack resistance.
Delivering the best balance of area efficiency, speed, and security with configurations ranging from 0.8 to 10 Gbps across multiple FPGA platforms.
Comprehensive support including custom PCIe interfaces, DMA, and packet processing with decades of cryptographic implementation experience.
NIST standards verified implementation ensuring reliable and trusted security for both commercial and defense applications.
Contact StealthCores today for detailed area and performance data, as well as information on different configurations and target devices. Let us help you integrate StealthAES into your design with maximum efficiency and security.