System and method for secured configuration data for programmable logic devices

A method for secured configuration data for a programmable device comprising:

• generating a bitstream, the bitstream used for configuration of a programmable device;
• generating an authentication tag using the bitstream, the authentication tag being appended to the bitstream forming configuration data;
• encrypting the configuration data using a key associated with the programmable device;
• receiving the encrypted configuration data at the programmable device;
• decrypting the encrypted configuration data using the key producing a received bitstream with appended authentication tag;
• separating the received bitstream from the appended authentication tag;
• generating a second authentication tag using the received bitstream;
• comparing the appended authentication tag with the second authentication tag to determine if they are equal;
• and
• configuring the programmable device using the received bitstream if the appended authentication tag and the second authentication tag are equal.

A method for secured configuration data for a programmable device comprising:

• generating a bitstream, the bitstream used for configuration of a programmable device;
• generating an authentication tag using the bitstream, the authentication tag being appended to the bitstream forming configuration data;
• generating a secret key;
• encrypting the configuration data using the secret key;
• encrypting the secret key using a second key, the encrypted secret key being appended to the encrypted configuration data;
• receiving the encrypted secret key and the appended encrypted configuration data at a programmable device;
• separating the encrypted secret key from the appended encrypted configuration data;
• decrypting the encrypted secret key using the second key producing a received secret key;
• decrypting the encrypted configuration data using the received secret key producing a received bitstream with appended authentication tag;
• separating the received bitstream from the appended authentication tag;
• generating a second authentication tag using the received bitstream;
• comparing the appended authentication tag with the second authentication tag to determine if they are equal;
• and
• configuring the programmable device using the received bitstream if the appended authentication tag and the second authentication tag are equal.