Lattice launches second generation security solution with new Mach-NX FPGA

Lattice Semiconductor Corporation, a leader in low-power programmable solutions, announced the launch of the second generation of its highly successful security control field programmable gate array (FPGA) family: the Lattice Mach-NX FPGA family. Mach-NX FPgas build on the capabilities of Lattice's MachXO3D family, announced in 2019, providing enhanced security features and fast, energy-efficient processing to deploy real-time hardware roots of trust (Hrots) on future server platforms as well as in computing, communications, industrial and automotive systems. Mach-NX is the third FPGA family developed on Lattice's Nexus FPGA platform in a year.

Patrick Moorhead, founder and president of Moor Insights & Strategy, said: "There is a tug-of-war going on between bad actors trying to exploit firmware vulnerabilities and developers working to design server platforms with security features and performance to stop the former. Better protection of systems requires real-time HRoT, as well as support for stronger encryption algorithms such as ECC 384 and new reliable data security protocols such as SPDM. "I believe technologies like Lattice's Mach FPGA family can simplify and accelerate the deployment of these technologies for server original equipment manufacturers (Oems) who want to better protect their platforms from cyber attacks and IP theft."

Esam Elashmawi, Lattice's chief Strategy and Marketing Officer, added: "Protecting a system from unauthorized firmware access is not just about establishing HRoT at boot time. It also requires that the components used to build the system be unaffected as they circulate throughout the global supply chain. When combined with the additional protection provided by our SupplyGuard security services, Lattice Mach-NX FPgas protect systems throughout their life cycle: starting with components, moving through the entire supply chain, initial product assembly, final product transportation, integration, and throughout the entire service life of the product."

Mach-nx FPgas are built on the system control capabilities of the Mach family, combining a "secure enclave" (an advanced, hardhard-based 384-bit encryption engine that supports reprogrammable bitstream protection) with logical units (LC) and I/O blocks. The "Security Quarantine" helps secure the firmware, while the LC and I/O modules support system control functions such as power management and fan control.

Mach-NX FPGas can verify and install over-the-air firmware updates to bring systems in line with evolving security guidelines and protocols. The parallel processing architecture and dual-boot flash configuration of Mach-NX FPGas provide the near-instantaneous response time needed to detect and recover from attacks (performance levels beyond the capabilities of other HRoT platforms such as MCUS). Mach-NX FPgas will support Lattice's Sentry solution stack, a powerful combination of custom embedded software, reference designs, IP, and development tools to accelerate deployment of secure systems that comply with NIST Platform Firmware Protection Recovery (PFR) guidelines (NIST SP-800-193).

Key features of the Mach-NX series include:

1.Secure system control - The Mach-NX FPGA's logic (up to 11,000 LCS) and high I/O count (up to 379) enable fast and secure system control. Lattice is a long-standing leader in the field of programmable logic for system control. On current transport server platforms, Mach FPgas have a placement rate of more than 80%.

2.Strong standards and protocol compliance - Mach-NX FPGas' 384-bit hardware encryption engine helps to quickly and easily implement leading encryption technologies such as ECC 384 and industry standard security protocols such as NIST SP-800-193 and MCTP-SPDM. The upcoming server platform will require support for these protocols.

3.End-to-end Supply chain protection - Mach-NX FPGas are supported by Lattice SupplyGuard™ Supply Chain Security subscription Service. SupplyGuard gives Oems and original design Manufacturers (ODMs) peace of mind by tracking locked Lattice FPGas throughout their lifecycle, from the time of manufacturing through shipping, system integration and assembly, initial configuration and deployment through the global supply chain.

4.Fast Customization - Lattice's Propel™ design environment accelerates the design of customized HRoT solutions that meet PFR requirements. The tool uses a graphical user interface (GUI) -based development environment that enables developers to build PFR solutions without having to write RTL code as much as possible.