The Lattice Sentry 5.0 Demo Board for MachXO5-NX helps you develop and test a NIST 800-193-compliant PFR solution supporting classical cryptography and post-quantum cryptography (PQC) on a single board, using the MachXO5-55TDQ FPGA as a Platform Root of Trust. The board communicates with the various FPGAs on the board over JTAG and UART interfaces. The device requires Lattice Propel and Lattice Radiant development tool environments.
The Lattice Sentry 5.0 Demo Board for MachXO5-NX demonstrates the Lattice PFR system security capability on a hardware platform that can be controlled through a dedicated user interface on a PC workstation. This board allows you to take advantage of the enhanced security features and greater configurability of the MachXO5-55TDQ device. The MachXO5-55TDQ device first authenticates its own internal image, then authenticates the images of external devices, including a CertusPro-NX (CPNX100) device that emulates the BMC, using classical cryptography (ECDSA-384) or PQC (ML-DSA-87). It detects illegal flash operations, blocks them, and automatically recovers damaged boot images. Before the system boots up and throughout its operation, these functions provide security at the hardware level.
Features
- Lattice Sentry 5.0 PFR demo with classical cryptography and PQC support
- Implements PFR system-level behavior validation
- Supports I3C, I2C, SMBUS, LTPI, GPIO/SGPIO/MPESTI, and eSPI Interfaces
- Supports USB connection device programming and for UART communication to PFR firmware
- With Four 1 Gb SPI/QSPI flash devices with SMT mount IC and Socket Mount IC for device configuration and firmware image storage
- Detect, protect and recover functionality on internal and external images, with image authentication using ML-DSA-87 (PQC) or ECDSA-384 (classical), and XMSS and LMS signature support
- Secure session setup using ML-KEM key exchange to enable encrypted messages over a secure interface
- Real-time QSPI flash monitoring, and I2C filtering that protects downstream EEPROM from disallowed write commands
- Out-of-band (SMBus) communication demonstration between an emulated BMC and the MachXO5-55TDQ Platform Root of Trust
- Demo setup includes a Raspberry Pi host-side control script, and a touch screen monitor to display messages from the Platform Root of Trust
- Reference design, RTL and RISC-V firmware source (Propel Builder and Radiant projects), and a walkthrough guide for the design tool flow and provisioning procedure
