of_sec_kmac
Masked KMAC engine
Maturity plannedTargets FPGA + ASICDifficulty HardPriority 2
Domain-masked Keccak engine with KMAC128/256 and a key sideload interface for key derivation inside a root of trust.
Planned. This block is specified in the catalog with its interfaces and targets. No implementation exists yet; the skeleton command below generates a lint-clean shell with its ports and registers.
Interfaces
| Port | Direction | Kind | Width | Notes |
|---|---|---|---|---|
| ctrl | in/out | APB control bus | 32 | Control and status registers, including ID, VERSION and STATUS |
| irq | out | interrupt | 1 | Interrupt request |
| msg_in | in | AXI4-Stream | 64 | |
| key_in | in | valid-qualified bus | 256 |
Standards
- NIST SP 800-185
- NIST FIPS 202
Basis projects
Permissive open projects the implementation may build on.
- OpenTitan (Apache-2.0)
More in hash
| ID | Block | Maturity |
|---|---|---|
| of_sec_sha256 | SHA-224/256 engine | fpga-routed |
| of_sec_sha512 | SHA-384/512 engine | simulated |
| of_sec_sha3 | SHA-3 and SHAKE engine | simulated |
| of_sec_sm3 | SM3 hash engine | planned |
| of_sec_blake2 | BLAKE2 engine | planned |
| of_sec_blake3 | BLAKE3 engine | planned |
| of_sec_hmac | HMAC engine | simulated |
| of_sec_kdf | Key derivation function engine | planned |