At Rambus, we create cutting-edge semiconductor and IP products, providing industry-leading chips and silicon IP to make data faster and safer.
Designed to be integrated in power and space-constrained SoCs or FPGAs, the RT-120 Root of Trust (formerly VaultIP) is a FIPS 140-3 compliant hardware core that guards the most sensitive assets on chips and establishes the foundation for platform security.
Featuring a firmware-controlled architecture with dedicated secure memories, the RT-120 hardware Root of Trust provides a variety of cryptographic accelerators including AES, SHA-2, RSA and ECC. Ideal for power and space-sensitive applications like IoT clients, edge nodes, and sensors. The RT-120 Root of Trust offers the best balance of size and performance available on the market.
The RT-120 offers a series of key security use cases ‘out of the box’, including:
- Secure Boot assist to host CPU(s) and protection of key material
- Secure firmware upgrade management for Host CPU
- Lifecycle management support
- Secure Debug support
- Secure device authentication and identity protection
The RT-120 provides a secure asset store:
- Only the RT-120 can manage, use and access the assets
- The O/S and applications cannot access key values
- Applications request asset use by reference through authorization
- Enforces policies for access and use of keys and cryptographic functions
- Key generation, derivation, storage and transport
Contact
Product BriefHow the Root of Trust Works
The RT-120 Root of Trust is a silicon IP core developed to protect an SoC platform and its operation. It allows the SoC to boot securely and protects sensitive key material and assets. At its heart, its Secure Asset Store allows import, negotiation, and creation of secret and private key material. Safe use of key material is enforced through a flexible key use and access policy. Keys can be securely stored in off-chip NVM. Fully featured, its cryptographic data plane associated to its DMA offloads the main CPU while never exposing secret data to the OS or the applications. It is designed to provide secure, energy efficient and accelerated security functions.
Readily deployable, the RT-120 Root of Trust is offered in off-the-shelf configurations, allowing a choice tailored to the needs of your application. Configurations differ by cryptographic accelerators contained and 3rd-party certification and standard compliance.
The RT-120 is part of the broad Rambus Root of Trust portfolio, which ranges from small, lightweight cores designed to protect IoT endpoints all the way to fully programmable Root of Trust cores designed to protect the most sensitive government/defense chips and automotive deployments requiring ISO-26262 certifications.
Rambus can optionally offer dedicated FIPS 140-3 support packages to its licensees that provide FIPS 140-3 related certification documentation, FIPS test scripts, and dedicated FIPS support.
Solution Offerings
| Feature | Description | Details |
| FIPS 140-3 | CAVP and CMVP Compliant | Includes CAVP certificates for NIST approved algorithms and TRNG |
| Cipher Algorithm Support | AES (all key sizes) | Modes: CBC, CTR, CCM, CMAC |
| Hash Algorithms | SHA-1, SHA-2 | SHA-2 224-256 |
| Message Authentication Code Algorithms | HMAC-SHA-1, HMAC-SHA-2 | SHA-2 224-256 |
| AEAD Algorithms | AES-CCM | Modes: CCM |
| Signature Generation and Verification | ECDSA RSA up to 3096 bits | NIST P-224, P-256, P-384, P-521 |
| Key Agreement Algorithms | ECDH DH | NIST P-224, P-256, P-384, P-521 Up to 3096 bits |
| Key Transport Algorithms | ECIES RSA Wrap/Unwrap (RSA-OAEP) AES-WRAP | 128- and 256-bit strength Up to 3096 bits 128- and 256-bit strength |
| True Random Number Generator | NIST SP800-90A/B/C | NIST ENT certificate |
| Crypto Performance | Cipher/Hash Performance (Gbps) @500MHz | Scalable, ~2 Gbps |
| I/O Bus | AMBA Bus Master/Slave | AXI/AHB Master, AXI/AHB/APB Slave |
| OTP Interface | Interface to 3rd-Party OTP | TCM |
- Cloud-connected devices
- IoT (Internet of Things) devices
- Industrial IoT
- Sensors
- Gateways
