
• Available in all configuration schemes except JTAG
• Supports both remote system upgrades and compression features
The Cyclone V design security feature provides the following security protection for your designs:
• Security against copying—the security key is securely stored in the Cyclone V device and cannot be read
out through any interface. In addition, as configuration file read-back is not supported in Cyclone V
devices, your design information cannot be copied.
• Security against reverse engineering—reverse engineering from an encrypted configuration file is very
difficult and time consuming because the Cyclone V configuration file formats are proprietary and the
file contains millions of bits that require specific decryption.
• Security against tampering—After you set the tamper protection bit, the Cyclone V device can only accept
configuration files encrypted with the same key. Additionally, programming through the JTAG interface
and configuration interface is blocked.
When you use compression with the design security feature, the configuration file is first compressed and
then encrypted using the Quartus II software. During configuration, the device first decrypts and then
decompresses the configuration file.
When you use design security with Cyclone V devices in an FPP configuration scheme, it requires a different
DCLK
-to-
DATA[]
ratio.
ALTCHIP_ID Megafunction
The ALTCHIP_ID megafunction provides the following features:
• Acquiring the chip ID of an FPGA device.
• Allowing you to identify your device in your design as part of a security feature to protect your design
from an unauthorized device.
Related Information
ALTCHIP_ID Megafunction User Guide
JTAG Secure Mode
When you enable the tamper-protection bit, Cyclone V devices are in the JTAG secure mode after power-up.
During this mode, many JTAG instructions are disabled. Cyclone V devices only allow mandatory JTAG
1149.1 instructions to be exercised. These JTAG instructions are
SAMPLE/PRELOAD
,
BYPASS
,
EXTEST
, and
optional instructions such as
IDCODE
and
SHIFT_EDERROR_REG
.
To enable the access of other JTAG instructions such as
USERCODE
,
HIGHZ
,
CLAMP
,
PULSE_nCONFIG
, and
CONFIG_IO
, you must issue the
UNLOCK
instruction to deactivate the JTAG secure mode. You can issue the
LOCK
instruction to put the device back into JTAG secure mode. You can only issue both the
LOCK
and
UNLOCK
JTAG instructions during user mode.
Related Information
•
on page 9-3
Provides more information about JTAG binary instruction code related to the
LOCK
and
UNLOCK
instructions.
Altera Corporation
Configuration, Design Security, and Remote System Upgrades in Cyclone V Devices
7-35
ALTCHIP_ID Megafunction
CV-52007
2014.01.10