Rambus

At Rambus, we create cutting-edge semiconductor and IP products, spanning memory and interfaces to security, smart sensors and lighting.

Home > Press Releases > Security IP

Security IP

Rambus Protects Data Center Infrastructure with Quantum Safe Engine IP

Highlights:

  • Expands industry-leading family of Quantum Safe IP solutions for data center and government hardware security
  • Integrates into root of trust or embedded secure element in advanced SoCs and FPGAs
  • Delivers cryptographic acceleration with leading NIST-selected quantum-resistant algorithms
QSE-IP-86 Quantum Safe Engine
Rambus Quantum Safe Engine (QSE) Block Diagram

SAN JOSE, Calif. – December 4, 2023 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced the availability of a Quantum Safe Engine (QSE) for integration into hardware security elements in ASICs, SoCs and FPGAs. Quantum computers will enable adversaries to break current asymmetric encryption, placing important data and assets at risk. The Rambus QSE IP core uses NIST-selected quantum-resistant algorithms to protect valuable data center and government hardware against attacks emerging in the post quantum computing era.

“From AI, to streaming video, to email, the applications we rely on daily depend on the integrity of data and must be guarded against the growing risk of attacks enabled by quantum computers,” said Neeraj Paliwal, general manager of Silicon IP at Rambus. “The Rambus Quantum Safe Engine is another important addition to our security IP portfolio helping customers transition to Quantum Safe Cryptography starting today.”

“Quantum computers will provide individuals and organizations the exponential speed-up and compute power needed to solve some of today’s most complex problems, including the ability to decrypt current data encryption algorithms,” said Heather West, PhD, research manager of Quantum Computing Research at IDC. “Implementing quantum-resistant cryptography now is key for organizations to protect their past, current and future data from quantum computing enabled attacks.”

The Rambus QSE IP is available as a standalone cryptographic core or integrated in the Rambus Quantum Safe Root of Trust IP as a comprehensive hardware security solution. It supports the National Institute of Standards and Technology (NIST) draft standards for quantum-resistant algorithms (FIPS 203 ML-KEM and FIPS 204 ML-DSA), and provides SHA-3, SHAKE-128 and SHAKE-256 acceleration. For highly secure applications requiring additional protection against differential power analysis (DPA) attacks, a DPA version of the QSE IP is available.

Availability and Additional Information:
The Rambus QSE is available for licensing today. Learn more at https://www.rambus.com/security/quantum-safe-cryptography/qse-ip-86/.

Rambus Safeguards Accelerated Computing with FPGA-targeted Security IP

Highlights:

  • Bring FPGAs with a state-of-the-art offering of security IP products
  • Secures the broad range of FPGAs from high-performance accelerators to low-power, lightweight devices
  • Supports FPGAs serving applications for the Data Center, Artificial Intelligence / Machine Learning, Edge, IoT, Defense, and more

SAN JOSE, Calif. – Aug. 22, 2023 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced a full suite of Security IP solutions for the FPGA market with state-of-the-art cryptographic, side-channel, and Quantum Safe protections. Designed to meet the unique needs of FPGAs, the offering secures the broad range of devices from high-performance accelerators for generative AI, to low-power solutions for IoT devices. Rambus security IP protects FPGAs serving applications in the Data Center, AI/ML, Edge, IoT, Defense, and beyond.

“As customer demand for security continues to accelerate, Rambus is dedicated to providing state-of-the-art security IP for the broad range of applications increasingly enabled by FPGAs,” said Neeraj Paliwal, general manager of Security IP at Rambus. “Our security IP solutions safeguard these FPGA devices now and in the future with Quantum Safe protection from PQC attacks.”

“In the increasingly distributed and accelerator-based computing architectures enabled by Intel FPGAs, it is mission critical to secure data and devices against today’s threats and those that arise with the advent of quantum computing,” said Premal Buch, vice president and general manager of Programmable Solutions at Intel. “We’re pleased to see Rambus offer security IP solutions tailored to FPGAs powering the growing landscape of accelerated computing.”

As part of the industry-leading portfolio, Rambus offers advanced FPGA targeted security IP products including root of trust, 800G MACsec, IPsec, classic and quantum safe public key encryption solutions. Leveraging pioneering work in differential power analysis (DPA) and fault injection attack (FIA) countermeasures, Rambus security IP delivers the highest levels of protection available against both cryptographic and side-channel attacks. With new Quantum Safe security IP products, Rambus futureproofs the protection of FPGAs for the coming Post Quantum Cryptography (PQC) era.

For more information about Rambus Security IP, please visit www.rambus.com/security.

Rambus Delivers Quantum Safe IP Solutions with Next-Generation Root of Trust for Data Center Security

Highlights:

  • Expands industry-leading security IP offerings with first in a family of Quantum Safe IP solutions
  • Next-gen Root of Trust safeguards data centers and communications from future attacks in post quantum computing era
  • State-of-the-art programmable security solution protects hardware and data with NIST and CNSA quantum-resistant algorithms

Root of Trust with Quantum Safe Encryption

SAN JOSE, Calif. – July 12, 2023 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced the first in a family of Quantum Safe security IP products with its next-generation Root of Trust for data center and communications security. Quantum computers will be able to rapidly break current asymmetric encryption, placing important data and assets at risk. The Rambus Root of Trust IP offers customers a complete Post Quantum Cryptography (PQC) hardware security solution that protects valuable data center and AI/ML assets and systems.

“To ensure today’s data remains protected into the future, we must implement now security solutions that safeguard against quantum attacks,” said Neeraj Paliwal, general manager of Security IP at Rambus. “This new generation of the Rambus Root of Trust is a flagship product in our Quantum Safe IP portfolio that offers customers complete security solutions for the data center and advanced workloads like generative AI.”

“Since 2016, NIST has done pioneering efforts to identify post-quantum cryptographic algorithms which will be better suited for protecting critical government and public infrastructure from entities looking to steal data now to decrypt later using quantum computing,” said Heather West, PhD, research manager of Quantum Computing Research at IDC. “Now that NIST has announced its first four post-quantum computing recommendations, it is important that system designers begin implementing quantum-resistant cryptography to ensure that data and hardware remain secure in the quantum computing era.”

Rambus Root of Trust IP with Quantum Safe Cryptography uses the quantum-compute resistant cryptographic algorithms selected by the National Institute of Standards and Technology (NIST): CRYSTALS-Kyber for key-encapsulation and CRYSTALS-Dilithium for digital signatures. In addition, Rambus Root of Trust IP supports the Commercial National Security Algorithm Suite (CNSA) algorithms for software and firmware updates including XMSS/LMS stateful hash firmware signatures, CNSA symmetric-key algorithms, and CNSA quantum-resistant public-key algorithms.

Rambus Quantum Safe Root of Trust Features:

  • Programmable 32-bit secure processor
  • Quantum Safe Encryption engine
  • Open Compute Project (OCP) Caliptra Root of Trust for Measurement with DICE and X.509 support
  • True Random Number Generator (TRNG) and Physical Unclonable Function (PUF) entropy source
  • Secure data store
  • FIPS 140-3 CAVP and CMVP compliant
  • SDK for user development of secure and trusted applications

More Information:
Learn more about the Rambus Root of Trust IP at www.rambus.com/security/root-of-trust/.

Rambus Accelerates Automotive SoC Design with ASIL-B Certified Embedded Hardware Security Module

Highlights: 

  • Rambus RT-640 Embedded Hardware Security Module (HSM) provides automotive chip and device makers state-of-the-art digital protection that meets the functional safety standards of ISO 26262 ASIL-B
  • Industry-standard certified solution accelerates the process of achieving functional safety for automotive SoCs
  • Rambus expands industry-leading security IP portfolio that spans applications from consumer IoT to mission-critical defense electronics
Rambus RT-640 Embedded HSM Block Diagram
Rambus RT-640 Embedded HSM Block Diagram
Rambus RT-640 ASIL-B Certification
Rambus RT-640 ASIL-B Certification

SAN JOSE, Calif. – Mar. 9, 2022 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced that the Rambus Root of Trust RT-640 Embedded Hardware Security Module (HSM) has received Automotive Safety Integrity Level B (ASIL-B) certification per the ISO 26262 international standard. Certified ASIL-B compliance is a critical requirement for automotive manufacturers and their suppliers to ensure vehicle systems meet necessary safety levels. As Advanced Driver Assistance Systems (ADAS) become increasingly ubiquitous, it is imperative that vehicle electronic systems and data be protected from cyberattack and system malfunction. By integrating the Rambus RT-640 Embedded HSM, automotive SoC makers are able to accelerate the process of achieving functional safety requirements with proven, certified security IP.

“Increasingly sophisticated automotive systems must be both functionally safe and resilient to cyberattack,” said Neeraj Paliwal, general manager of Security IP at Rambus. “With the Rambus RT-640 Embedded HSM, automotive manufacturers get the best of both worlds: robust cybersecurity anchored in hardware with the assurance of ASIL-B functional safety. We have already achieved multiple design wins for the RT-640 across the globe, and it has tremendous traction in the new centralized automotive architecture across ADAS and sensors such as cameras, lidar and radar.”

Rambus is the leading supplier of security IP with the industry’s broadest portfolio of solutions. With nearly 200 design wins in the past three years, Rambus has proven security IP solutions for every application from consumer IoT to mission-critical defense electronics. With certified solutions such as the RT-640 Embedded HSM, chip and device makers can implement state-of-the-art security, meet industry-specified requirements, and reduce time to market.

Ensuring Functional Safety with ISO 26262 ASIL-B

Specified under ISO 26262, ASIL-B is a risk classification defined for functional safety of road vehicles. ASIL levels are assigned by performing risk analysis of potential hazards by examining various risk parameters such as severity, exposure and controllability of the vehicle operating scenario. In addition to the RT-640 HSM ASIL-B certification, the Rambus hardware and software development organizations have demonstrated to have the qualification, knowledge, and expertise required for the automotive industry and therefore have been certified to operate in accordance with ISO 26262:2018 standard ASIL-B for development and support processes.

While developing ADAS, automotive electronics makers are building complex SoCs, replacing discrete secure processor elements with ISO 26262-certified synthesizable IP and software. The Rambus RT-640 is the first programmable automotive grade Hardware Root of Trust IP solution on the market to reach this certified status. Customers can integrate the RT-640 as-is and focus on their own automotive security application without affecting the RT-640 certificate.

Integrated into an automotive SoC, the ASIL B certified RT-640 silicon IP design provides powerful cryptographic functions, state-of-the-art safety mechanisms and anti-tamper technologies to protect critical automotive electronics and data. This robust cybersecurity solution has been certified by TÜV-SGS 26262 ASIL-B functional safety. The ASIL-B certificate guarantees that all safety mechanisms are implemented and verified correctly, meet and exceed the required safety integrity levels and are supported with the ISO 26262 required evidence.

The certified RT-640 Embedded HSM key features include:

  • Fully programmable, purpose-built security processor with hardware enforced security and privilege levels
  • High-performance cryptographic accelerators for RSA, ECC, AES, HMAC and SHA-2
  • NIST SP 800-90 compliant random bit generator
  • Hardware enforced security with state-of-the-art protection from side channel and tampering attacks
  • ASIL-B safety mechanisms in the HW and SW implementation

More Information:

For more information on the Rambus RT-640 Embedded HSM, please visit https://www.rambus.com/security/root-of-trust/rt-640/.

Rambus Root of Trust Delivers FIPS 140-2 CMVP Security in Kyocera Multifunction Products

Highlights:  

  • Kyocera multifunction products (MFPs) integrate FIPS-certified Rambus RT-130 Root of Trust, and AES-IP-38 AES Accelerator
  • Industry-leading Rambus security IP accelerates and streamlines customer CMVP certification process
  • Rambus security IP enables chip and system companies to provide their customers with the most robust and up-to-date protection of hardware and data

SAN JOSE, Calif. – Jan. 11, 2022 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced that Kyocera Evolution Series MFPs offer data security meeting Federal Information Processing Standards (FIPS) 140-2 Cryptographic Module Validation Program (CMVP) standards using the Rambus RT-130 Root of Trust and AES-IP-38 AES Accelerator IP. Meeting FIPS 140-2 CMVP demonstrates that Kyocera MFP customers are assured the highest level of security for their hardware and data.

“We enable our customers to turn information into knowledge, excel at learning and surpass others. With professional expertise and a culture of empathetic partnership, we help organizations put knowledge to work to drive change,” said Michihiro Okada, deputy senior general manager, Corporate R&D Division, at Kyocera. “Relying on Rambus for mission-critical security IP allows us to offer customers world leading document solutions and ensure their data is protected.”

“Relying on Rambus for mission-critical security IP allows us to offer customers world leading document solutions and ensure their data is protected”

- Michihiro Okada, Deputy Senior General Manager, Corporate R&D Division at Kyocera

By building on Rambus FIPS CMVP-certified IP solutions, chip and system providers can better navigate the certification process and speed the development of secure solutions. The industry-leading, FIPS-certified Kyocera Evolution Series MFPs utilize the Rambus RT-130 Root of Trust and AES-IP-38 AES Accelerator as part of a system security architecture that provides the most robust and up-to-date protection for customers.

“Secure by design is a fundamental property of solutions from industry leaders like Kyocera,” said Neeraj Paliwal, general manager of security IP at Rambus. “With FIPS 140-2 CMVP certified security IP from Rambus, customers are able to rapidly and efficiently achieve the highest level of protection of systems and data.”

To find out more information about Rambus security solutions, please visit the FIPS 140-2 CMVP-certified RT-130 Root of Trust and AES-IP-38 AES Accelerator IP cores. For more details on Rambus Security IP, visit rambus.com/security/.

NextChip Selects Rambus Security IP to Secure Apache6 Automotive Processor

Highlights:

  • Rambus RT-640 Root of Trust and MACsec-IP-160 Protocol Engine to protect next-generation NextChip Apache6 SoC
  • Rambus Root of Trust and MACsec engine enable secure boot for centralized domain/zone processors and link protection for Automated Valet Parking (AVP) and other demanding ADAS applications
  • Rambus security solutions meet ISO 26262 ASIL-B reliability and protect mission-critical data at rest and in motion

SAN JOSE, Calif. – Dec. 7, 2021 – Rambus Inc. (NASDAQ: RMBS), a premier chip and silicon IP provider making data faster and safer, today announced that NextChip has selected the Rambus RT-640 Root of Trust and MACsec-IP-160 Protocol Engine to provide hardware-level security for their next-generation Apache6 automotive processor. The Apache6 ADAS SoC combines advanced CPU, GPU, ISP and NPU processors to enable demanding automotive vision and domain/zone controller applications such as AVP. The Rambus RT-640 Root of Trust is specifically tailored as an embedded hardware security module (HSM) for automotive ADAS applications requiring ASIL-B level reliability. In addition, the MACsec-IP-160 encrypts and protects data communicated over the in-vehicle network.

“We’re raising the bar for reliable, compact and affordable ADAS solutions with the Apache6,” said Hweihn Chung, CTO at NextChip. “With Rambus security IP solutions, Apache6 offers state-of-the-art protection of mission-critical data while meeting full ASIL-B compliance.”

The Rambus RT-640 Root of Trust provides security services and protection of data processed by the Apache6 SoC. The RT-640 is a powerful security co-processor featuring automotive grade embedded security software, high-performance cryptographic accelerators for AES, HMAC, SHA-2 and more. In addition, dedicated safety integrity mechanisms ensure correct operations and extensive error handling and the advanced anti-tamper features of the RT-640 protect chips from side-channel and fault injection (FI) attacks. The Rambus MACsec-IP-160 encrypts and protects data at speeds up to 100 Gbps over Ethernet in-car networks.

“The growing power and capabilities of ADAS solutions like NextChips’s Apache6 raise the stakes for the highest level of data and hardware security,” said Neeraj Paliwal, general manager of Security IP at Rambus. “It’s an honor to be selected by NextChip for our industry-leading security solutions tailored for the performance and reliability needs of the automotive market.”

 

More Information:

For more information, please visit:

Rambus logo