News for hackers. Stuff that matters.
Re:The Lack of Open Tooling for FPGAs by makomk on Tuesday April 21, 2015 @04:03AM (#9412748)
Some people have been preventing cloning by locking their bitstream to the FPGA's unique serial number, which exists partly to allow people to do this. This is trivial to work around if you know the bitstream and device internals.
Re:The Lack of Open Tooling for FPGAs by diamondman on Tuesday April 21, 2015 @05:00PM (#9417064)
I disagree that it is trivial. If we know what bits of the unencrypted bitstream do what, and have a cryptographically secure way of signing the stream, then GLHF with that. If it turns out that documenting the parts of the chip required for configuration makes the black box security not work, then it was crap security and provided no real security to anyone. As it stands there is no way to tell and we have to take the smiling sales guy's word that it is "SUPER secure, promise".