Key management in an integrated circuit

A system comprising:

• a field-programmable integrated part of an integrated circuit,
• wherein the field-programmable integrated part is configured to:
• load a hardware configuration for the field-programmable integrated part into the field-programmable integrated part, the hardware configuration comprising a key derivation functionality enabling the field-programmable integrated part to perform a key derivation function, and
• derive, by operation of the hardware configuration in the field-programmable integrated part using the key derivation functionality, a cryptographic key based on information provided in the field-programmable integrated part,
• wherein the information in the field-programmable integrated part comprises a fingerprint of a bitstream of the hardware configuration.