Firmware Protection Requires Hardware-Level Security
Lattice Mach-NX FPGA Delivers Real-Time HRoT
Faster than MCU and Supports Real-Time SPI Monitoring


A competition is underway between attackers exploiting firmware vulnerabilities and developers designing server platforms with security features and performance to block them. To protect systems, real-time HRoT (Hardware Root-of-Trust) supporting strong cryptographic algorithms and data security protocols is necessary.

On the 10th, Lattice Semiconductor unveiled the second-generation "Lattice Mach™-NX" Security Control FPGA Product Family through an online press briefing.

Based on "Lattice MachXO3D™" launched in 2019, Mach-NX provides the security features and rapid, power-efficient processing capabilities necessary to implement real-time HRoT (Hardware Root-of-Trust) on servers, as well as in industrial, telecommunications, and automotive applications.

The parallel processing architecture and dual-boot flash memory configuration provide the immediate response times required for cyber attack detection and recovery.

Lee Ki-hun, Manager at Lattice Korea, who led the briefing, emphasized, "Mach-NX has firmware authentication time of 5 seconds or less, and firmware recovery time in microsecond (μs) units, which is superior compared to other HRoT platforms such as MCUs, and also provides real-time SPI monitoring."

Mach-NX is equipped with "Secure Enclave," an advanced 384-bit hardware-based encryption engine supporting reprogrammable bitstream protection functionality, which keeps firmware secure. Developers can implement cryptographic algorithms such as ECC 384 and industry-standard security protocols such as NIST SP 800-193 and MCTP-SPDM.

By combining up to 11,000 logic cells (LC) and up to 379 I/O blocks, fast and secure system control is possible, and OTA (Over-The-Air) firmware update functionality is also supported.

Additionally, "Lattice Sentry™" solution stack, a combination of customized embedded software, reference designs, IP, and development tools, will be supported to accelerate implementation of secure systems complying with NIST Platform Firmware Resiliency (PFR) guidelines (NIST SP-800-193).

Mach-NX is supported by "Lattice SupplyGuard™," a supply chain security subscription service. SupplyGuard enables tracking of Lattice FPGAs with locking capabilities throughout the entire lifecycle, from the point of manufacture, through transportation via the global supply chain, system integration and assembly, initial configuration, to on-site installation.

Meanwhile, Lattice Propel™ design environment accelerates customized design of PFR-compatible HRoT solutions. The tool provides a GUI-based development environment that allows developers to create PFR solutions without needing to write RTL code.