Lattice Sentry™ Solution Stack | PQC-Enabled FPGA PFR Root of Trust

Related Applications

The Lattice Sentry solution stack (v5.0) includes everything system designers need to evaluate, develop, test and deploy a NIST SP800-193-compliant, CNSA 2.0-aligned, post-quantum cryptography (PQC)-enabled, FPGA-based Platform Firmware Resiliency (PFR) Root of Trust and attestation solution.

The Lattice Sentry solution stack consists of a complete reference platform, fully validated IP building blocks, easy to use FPGA design tools, reference design/demonstrations, as well as a network of custom design services. In many instances, a fully functioning PFR solution can be developed by modifying the included RISC-V C source code. Yet, developers who wish to create additional RTL logic to supplement the functionality can do so using the Lattice Radiant® and Lattice Propel™ software tools. Lattice Sentry 5.0 also integrates AMI Tektagon™ PQC Resiliency, an end-to-end framework for PQC-enabled provisioning, attestation, firmware updates and lifecycle management.

Available now for the Lattice MachXO5-NX, MachXO3D and Mach-NX FPGAs.

Sentry 5.0 targets the Lattice MachXO5-NX family (MachXO5-55TDQ device). Demo boards and custom design services are available now. Production and shipping are planned for Q4 2026.

What’s New in Sentry 5.0?

Post-quantum cryptography (PQC) for platform firmware resiliency, with CNSA 2.0-aligned algorithms: ML-DSA-44/65/87 signing and verification, ML-KEM key encapsulation, and LMS and XMSS signature verification.

Bitstream boot authentication using LMS or XMSS, with crypto-agility and anti-rollback protection that adapts as cryptographic standards evolve.

SPDM-based device attestation anchored by Device Identifier Composition Engine (DICE) identity and measurement, with key provisioning and revocation, secure firmware updates and secure decommissioning.

Integration with AMI Tektagon™ PQC Resiliency, an end-to-end framework for PQC-enabled provisioning, attestation, firmware updates and lifecycle management.

Integrated tooling for PQC manifest generation, signing workflows, and BIOS and BMC provisioning.

Capabilities introduced in Sentry 4.0, including Slave SPI and JTAG provisioning, the DICE certificate and associated APIs, and User Flash Memory (UFM) Plain Text Mode with individual sector erase, remain part of the solution stack.

Contact Sales

Video

Expand Video

Lattice Security Solutions Portfolio including Lattice Mach™-N2, Lattice Sentry™ 5, Lattice Security Retrofit, and Nuvoton OpenTitan

This presentation provides an overview of the Lattice security portfolio for data center platforms, including Lattice Mach-N2, Lattice Sentry 5, the Security Retrofit approach, and the Lattice and Nuvoton OpenTitan solution. It shows how each option helps customers add Root of Trust capabilities to new and existing designs.

Date: October 21, 2026 (English) Watch Now

Expand Video

Lattice Sentry 4.0 with DC-SCM Single Chip Solution (PFR +LTPI)

This solution integrates Lattice Sentry 4.0 Platform Firmware Resilience (PFR) and DC-SCM CPLD (LTPI) into a single chip. It utilizes a single Lattice MachXO5™ (LFMXO5-55TD) device.

System Architecture

Implementation

Reference Design

Reference Design
 Lattice Sentry 4.0 SCM and HPM CPLD Reference Design ​​This is a CPLD design template for the Secure Control Module (SCM) and Host Platform Module (HPM) for the Sentry 4.0 Server solution platform.​ 
MachXO3D, MachXO5-NX 
SCM, HPM, CPLD, Lattice Sentry, Security, Defense, LTPI, MPESTI, SGPIO, eSPI, OCP 
Reference Design
 Lattice Sentry™ 5.0 SCM and HPM CPLD Reference Design This is a CPLD design template for the Secure Control Module (SCM) and Host Platform Module (HPM) for the Sentry 5.0 Server solution platform. 
MachXO3D, MachXO5-NX 
SCM, HPM, CPLD, Lattice Sentry, Security, Defense, LTPI, MPESTI, SGPIO, eSPI, OCP 
Reference Design
 Lattice Sentry Root of Trust Reference Design for MachXO3D This design utilizes Lattice Sentry IP to help you develop and test a complete NIST 800-193-compliant PFR solution. You can modify to suit your specific needs. 
MachXO3D 
NIST, RISC-V, Lattice Propel, Lattice Sentry, Security, Defense 
Reference Design
 Lattice Sentry Root of Trust Reference Design for Mach-NX This design utilizes Platform Firmware Resiliency System Root of Trust to help develop and test a complete NIST 800-193 compliant security system that protects, detects, and recovers.
Mach-NX 
GPIO Control, I2C, RISC-V, SPI, UART, NIST, Lattice Propel, Lattice Sentry, Defense 
Reference Design
 ​​Lattice Sentry PFR Platform Root of Trust (PRoT) Reference Design​ ​​Lattice Sentry PFR Platform Root of Trust design support Mach-NX and MachXO5-NX devices with low-density FPGA and enhanced user-mode security functions.​ 
MachXO5-NX, Mach-NX 
PFR, RoT, Lattice Propel, Lattice Sentry, Security, Defense 

Demos

Lattice Sentry Solutions Stack Platform Firmware Resiliency Concept Server Platform

Demo

Lattice Sentry Root of Trust Demo for MachXO3D

A complete bitstream/firmware package which helps you demonstrate and test a NIST 800-193-compliant PFR solution on the Lattice Sentry Demo Board for MachXO3D

MachXO3D

NIST, RISC-V, Lattice Sentry, Security, Defense

IP Cores

IP Core
 ​​eSPI Target IP Core​ ​​Lattice eSPI Target IP Core is compliant with the Intel eSPI specifications & has its own virtual wire channel in the user interface.​ 
MachXO5-NX, Mach-NX, MachXO3D, MachXO3, MachXO2, MachXO4 
APB, AHB-Lite, Lattice Sentry, OCP 
IP Core
 Lattice Sentry PLD Interface IP Core Lattice Semiconductor Customer Programmable Logic Devices (PLD)implements a bidirectional mailbox for sending and receiving messages.
Mach-NX, MachXO5-NX 
AHB-Lite, APB, FPGA, RTL, Lattice Propel, PLD, Lattice Sentry, Lattice Sentry PFR IP Package, Security 
IP Core
 Lattice Sentry SMBus Mailbox IP Core SMBus, a two-wire interface that support fairness arbitration and compatible with AHB-Lite specification. Target devices are Mach-NX and MachXO3D.
MachXO3D, MachXO5-NX, MachXO4, CertusPro-NX 
I2C, AHB-L, Lattice Propel, Lattice Sentry, Security, SMBus, RoT, RTL, Lattice Sentry PFR IP Package 
IP Core
 PIC IP Core Lattice Semiconductor PIC soft IP with configurable 1~8 interrupt inputs and 32-bit AHB-L interface for Mach-NX FPGA
Mach-NX, MachXO5-NX 
AHB-Lite, Lattice Propel, Lattice Diamond, Lattice Sentry, Lattice Sentry PFR IP Package, Security 
IP Core
 SFB Interface IP Core SFB allow access to AHB-L CPLD block , management CPU recovery circuit and Flash sector for read/write.
Mach-NX 
AHB-Lite, Lattice Propel, Lattice Sentry, Security, SPI, JTAG, Soc, CPLD, Lattice Sentry PFR IP Package 

Development Kits & Boards

Board
 Lattice Sentry Demo Board for MachXO3D A complete platform to help you develop and test a NIST 800-193-compliant PFR solution. Includes numerous features to enable debug, interface and expansion
MachXO3D 
Soft Processor, SPI Flash, Raspberry Pi, Security, Lattice Sentry, UAVs 
Board
 Lattice Sentry 4.0 Demo Board for MachXO5D-NX A complete platform to help you develop and test a NIST 800-193-compliant PFR solution and help in SoC project in Lattice Radiant and Propel 2024.1 Tools.
MachXO5-NX 
Defense, Security, Lattice Sentry, PFR, RoT, Avionics 
Board
 Lattice Sentry Demo Board for Mach-NX A complete platform to help you develop and test a NIST 800-193-compliant PFR solution. Includes numerous features to enable debug, interface and expansion
Mach-NX, ECP5 
UAVs, Defense, Soft Processor, SPI Flash, Raspberry Pi, Security, Lattice Sentry, Avionics 
Board
 Lattice Sentry™ 5.0 Demo Board for MachXO5-NX A complete platform to help you develop and test a NIST 800-193-compliant PFR solution and help in SoC project in Lattice Radiant and Propel 2024.1 Tools.
MachXO5-NX, CertusPro-NX 
Defense, Security, Lattice Sentry, PFR, RoT, Avionics 

Downloads

Downloadable Software

TITLE	NUMBER	VERSION	DATE	FORMAT	SIZE
Select All
Lattice Sentry 2.2 Mach-NX PFR and SFB Architecture - User Guide	FPGA-TN-02359	1.0	5/24/2024	PDF	902.6 KB
Lattice Sentry 2.2 Mach-NX SoC Function Block Hardware - User Guide	FPGA-TN-02360	1.0	5/23/2024	PDF	1.1 MB
Lattice Sentry Firmware Signing Tool for Mach-NX Devices User Guide	FPGA-TN-02351	1.1	5/3/2024	PDF	919 KB
Lattice Sentry Flash Address Map Generation for Mach-NX Access this document via a Technical Support Request after signing in to the Lattice website. Complete the request form via this link, please click here.			3/13/2024	WEB

*By clicking on the "Notify Me of Changes" button, you agree to receive notifications on changes to the document(s) you selected.

TITLE	NUMBER	VERSION	DATE	FORMAT	SIZE
Select All
Lattice Sentry Installation Guide	FPGA-AN-02032	1.0	10/21/2020	PDF	442 KB

TITLE	NUMBER	VERSION	DATE	FORMAT	SIZE
Select All
APB Dual Timer IP Core - User Guide	FPGA-IPUG-02250	1.0	5/13/2024	PDF	363.8 KB
Lattice Sentry 4.0 MachXO5-NX LFMXO5-55TD Walkthrough - User Guide	FPGA-UG-02217	1.1	4/21/2025	PDF	2.2 MB
Lattice Sentry 4.0 PFR SCM Single-Chip MachXO5-NX LFMXO5-55TD Walkthrough - User Guide	FPGA-UG-02245	1.0	1/20/2026	PDF	2.3 MB
Lattice Sentry I2C Filter IP Core - User Guide	FPGA-IPUG-02166	1.4	12/11/2025	PDF	791.3 KB
Lattice Sentry Programmable Interrupt Controller IP Core - User's Guide	FPGA-IPUG-02141	1.0	12/16/2021	PDF	922 KB
Lattice Sentry SFB Interface IP Core - User Guide Access this document via a Technical Support Request after signing in to the Lattice website. Complete the request form via this link, please click here.	FPGA-IPUG-02151		12/27/2023	WEB
Lattice Sentry SMBus Mailbox IP Core – User Guide	FPGA-IPUG-02165	1.3	6/26/2026	PDF	612.3 KB