Abstract: To improve the efficiency of System-on-Chip(SoC) integration and verification for different applications of information security,a complete and pre-verified encryption and decryption subsystem based on embedded CPU is proposed. The subsystem includes cryptography modules such as RSA,DES,AES and so on. It can satisfy applications of different requirements on security levels. The embedded CPU in subsystem is a low-power and high-performance CPU,as a coprocessor for main CPU in SoC. It is responsible for controlling the operation of cryptography modules, reducing both the computation load of the main CPU and the power of SoC greatly. Integrating the pre-verified encryption and decryption subsystem as a whole to SoC,significantly reduces SoC design and integration effort and lowers the difficulty of SoC verification. Using gated clock technology, which manages the clock of cryptography modules based on their states,reduces the power of subsystem effectively. According to the CKSoC Integration method, the subsystem based on embedded CPU in different hardware configuration can be implemented quickly in the SoC integrator. Experimental results show that SoC design and verification work of constructing subsystem are reduced,and it improves work efficiency.

Key words: encryption and decryption subsystem, system reuse, System-on-Chip ( SoC ) integration, Advanced Encryption Standard(AES), Data Encryption Standard(DES)

摘要： 针对信息安全等级和应用场合变化时IP 级复用的片上系统(SoC)集成验证效率低的问题,提出一种基于嵌入式CPU 的加解密子系统。子系统包括RSA,DES,AES 等多种加解密模块,通过硬件上的参数配置,构造满足不同信息安全应用和等级的子系统;采用低功耗高性能的嵌入式CPU,作为SoC 中主CPU 的协处理器,控制各加解密模块的工作,可减少对主CPU 的访问,以降低功耗。将经过验证的加解密子系统作为整体集成到SoC 中,实现子系统复用,可减少SoC 设计和集成工作量,降低SoC 验证难度;利用门控时钟技术,根据各加解密模块的工作状态管理时钟,从而降低加解密子系统的功耗。采用CKSoC 设计集成方法,在SoC 集成工具平台上可快速集成不同配置下的基于嵌入式CPU 的加解密子系统。实验结果表明,构造子系统后的SoC 设计和验证工作量明显减少,提高了工作效率。

关键词: 加解密子系统, 系统复用, 片上系统集成, 高级加密标准, 数据加密标准

CLC Number: 

• TP309