Intro
FortifyIQ’s high-performance, hardened AES software library, AES-SW, delivers ultra-strong protection against side-channel attacks (SCA) and fault injection attacks (FIA) through software download. It supports both devices already deployed in the field and those lacking hardware protections for any reason. Field-proven in millions of devices, AES-SW achieves extremely high performance—even on low-end processors—enabling real-time decryption of Ultra HD (3840×2160) video streams on a 1.1 GHz Arm processor.
The AES-SW library supports all AES chaining modes and defends against side-channel attacks using the STORM protection scheme. It is portable and processor-agnostic, maintaining consistent, high-assurance protection across CPUs, including microprocessor units (MPUs) and microcontroller units (MCUs). Its security has been validated through rigorous testing, demonstrating compliance with FIPS 140-3 Level 4—exhibiting no TVLA leakage in over 100K traces in a noiseless environment.
A command-line interface is also available for quick encryption and decryption tasks.
STORM is FortifyIQ’s next-generation AES protection scheme, designed to deliver the highest level of resilience against SCA and FIA, including DPA, SIFA, and cache attacks.
FortifyIQ | Competitors | |
High Security | ![]() | ![]() |
High Performance | ![]() | ![]() |
* We compare only against solutions with uncompromised security
Deliverables
- The folder with the public header files of the library
- The folder with the library with which to link
- The folder with the command-line application (optional)
- The folder with the integration rules for the CMake build system
- Technical support and assistance
Tech Specs
- Part Number
AES-DPA-FIA SW library
- Short description
Advanced DPA- and FIA-resistant FortiCrypt AES SW library
- Compliant standard
FIPS-197
- Provider
FortifyIQ, Inc.
- Availability
Now
Request Library Access
Features
- Ultra-strong side-channel and SIFA protection at high performance
- NIST FIPS-197 compliant
- AES-128/192/256 encryption and decryption
- Tunable protection level
- Supports all chaining modes: ECB, CBC, CFB, OFB, CTR, XTS
- Portable to any CPU/MCU/MPU
Benefits
- Can fix unprotected/vulnerable HW solutions already in the field
- Ultra-strong SCA and FIA protection, including SIFA
- Performance so exceptional that it enables encryption/decryption of Ultra HD video streams even on low-end CPUs
Applications
- IoT devices
- Communications
- Automotive
- Secure internet protocols (SSL/TLS, IPSec)
- Content protection (Set-Top Boxes, SoCs)
- Virtual Private Networks (VPN)
- Storage, disk encryption