Thales nShield HSMs in combination with custom firmware running on the nShield generates a unique authorization code for each SmartFusion2 or IGLOO2 device. The authorization code can only be decrypted by the device for which it was generated. Within the HSM security boundary a device limit count is used to control the number of authorization codes generated and hence the number of systems built.

This agreement, which makes Microsemi a certified reseller of Thales Nshield HSMs, strengthens the relationship between Microsemi and Thales and extends the trusted supply chain assurance infrastructure used in-house to the end customer. Microsemi has been using Thales Nshield HSMs as part of its manufacturing flow for Smartfusion 2 and Igloo 2 devices to inject unique device IDs, device keys and x.509 device certificates. Allowing Microsemi customers to use the same HSMs in their manufacturing flow closes the loop on supply chain assurance. This enables the company’s customers in the communications, industrial and defense markets to trust that their deployed systems are authentic and utilised precisely as planned. Overbuilding prevention is now completely automated.

“Our relationship with Thales allows us to combine our companies’ security technologies and provide our customers the highest levels of protection to safeguard their intellectual property, products and revenues from today’s evolving threats,” said Shakeel Peera, senior director of FPGA/SoC marketing for Microsemi. “This new offering builds upon our existing hardware security module manufacturing infrastructure by allowing customers to securely programme their unique key material and designs into a fixed number of Smartfusion 2 SoC FPGAs and Igloo 2 FPGAs even in untrusted locations.”

The U.S. Chamber of Commerce estimates that intellectual property (IP) threats cost domestic companies more than $250 billion per year in lost revenues. Hardware security modules effectively remove the vulnerability posed by insiders, particularly those within manufacturing locations, enabling offshore manufacturing without threat of overbuilding, cloning or reverse engineering—or incorporating classified data during non-classified manufacturing—while maintaining confidentiality of the sensitive data and preventing tampering such as insertion of a Trojan horse. A hardware security module is a tamper-resistant device designed to generate keys securely, encrypt FPGA bitstreams in a secure environment, facilitate the use of customer owned sensitive key material and execute standard and custom algorithms requiring the use of protected keys.

“Partnering with innovative companies like Microsemi enables Thales to apply our cumulative decades of experience in practical cryptographic techniques to securing the backbone components of the Internet of Things,” said Cindy Provin, president of Thales e-Security, Inc. “As a world class provider of powerful, flexible hardware based cryptographic solutions, Thales looks forward to joining Microsemi in developing and deploying sophisticated cryptography that solves security problems at the heart of the advanced digital supply chain.”

Applications that can benefit from Thales e-Security hardware security modules include any FPGA-based system that may be at risk for overbuilding, including core routers, switches, small cells, remote radio heads, factory automation, process control, smart small form-factor pluggables (SFPs), programmable logic controllers (PLCs), secure communications, missile systems, and defense equipment targeted at foreign military sales (FMS).