World’s first automotive grade PCIe 5.0 IP with IDE security

Synopsys has launched the world’s first automotive-grade PCIe 5.0 IP with Integrity and Data Encryption (IDE) security.

The IP is designed to the requirements of ISO 26262 and ISO/SAE 21434 standards with ASIL-B certification.

This is the first IP with IDE security modules that provide confidentiality, integrity, and replay protection for Transaction Layer Packets (TLP) as defined in the PCI-SIG IDE specification. This ensures data remains secure and unaltered during transit by using optimized AES-GCM cryptographic cores with 256-bit keys.

This high level of security is crucial for performance-intensive automotive applications, ensuring data on the wire is secure from observation, tampering, and replay attacks, says Dana Neustadter, director of product management for Security IP Solutions at Synopsys.

• Anritsu teams for PCIe 5.0 test
• Synopsys lunches PCIe 7.0 end-to-end IP

The IDE security module integrates seamlessly with the Synopsys PCIe 5.0 controllers to accelerate SoC integration with maximum throughput in full-duplex for Rx and Tx directions via a TLP packet-based interface. The packet-based interface matches the data width used by the controllers, e.g., 512-bit or 256-bit, together with the maximum number of TLP prefixes to offer an optimal performance vs. area implementation.

The IDE extended capability registers are accessible from the Synopsys Controllers for PCIe 5.0, giving a clear view of the link capabilities during discovery and configuration timeframes.

The IP has a range of safety mechanisms to protect against permanent and transient faults that can occur unpredictably during the lifetime of an automotive system. These include a dual rail architecture, self-checking comparators and partity protected safety monitor registers as well as diagnostic error injection and error correction code (ECC) error injection in software and a processing monitor for timing events. The external logic built-in self-test (LBIST) is also mandatory at boot time.