Protecting Quantum Era Cryptography. Today.

FIQ-PKA04C RSA Signature Verification Accelerator

Compact RSA Signature Verification Accelerator for Constrained Devices

RSA signature verification is widely used in secure boot and code authentication, yet it can strain the limited computational resources of low-power embedded systems. FortifyIQ’s FIQ-PKA04C is a compact and efficient RSA verification IP core optimized for SoC integration in resource-constrained environments. Designed specifically for public-key operations, it requires no countermeasures against side-channel or fault injection attacks. Supporting RSA-4096 with fast modular arithmetic, FIQ-PKA04C enables standards-compliant cryptographic verification with minimal area and power consumption, ideal for secure applications that demand lightweight, high-assurance public-key validation.

Features

  • Efficient Performance
  • Patented High-Performance Modulo Multiplication
  • Flexible Interfaces
  • RAM/ROM Firmware Support
  • Security Certification Readiness

Applications

  • IoT Devices
  • Automotive Systems
  • Embedded and Industrial Control
  • Authentication Tokens
  • Payment Systems
Technical Overview

FortifyIQ’s FIQ-PKA04C is a compact IP core for RSA signature verification, optimized for fast, standards-compliant public-key operations in resource-constrained environments. Supporting RSA-4096 compliant with FIPS 186-5, it delivers efficient signature validation with minimal area and power consumption, ideal for secure boot, firmware authentication, and digital signature checking.

Since only public-key inputs are processed, no countermeasures against physical attacks (e.g., side-channel or fault injection) are required. This streamlines integration and reduces overhead while maintaining compatibility with cryptographic standards.

A patented high-performance modular exponentiation engine contributes to the core’s speed and compact footprint. The design is implementation-agnostic and suitable for ASICs, SoCs, and FPGAs, offering flexible interfacing via AMBA AHB, APB, AXI, or custom memory-mapped protocols. Optional firmware support is available via internal RAM or ROM, and the included HAL and software libraries simplify integration. FIQ-PKA04C is designed for straightforward deployment in systems requiring reliable and efficient RSA signature verification.

External Dependencies

  • Requires an external cryptographically secure random number generator (CSPRNG)
  • Requires an external hash function to enable ECDSA operations

Deliverables

  • SystemVerilog source code or netlist
  • Testbench, input vectors, and expected results
  • Sample timing constraints, synthesis, and simulation scripts
  • Hardware Abstraction Layer (HAL) reference implementation
  • Integration, configuration, and usage manuals
  • Firmware code
  • Software library
  • Security documentation
FortifyIQ AES Algorithm
AVA_VAN.5 Evaluation & Validation Summary
SGS Brightsight Common Criteria Laboratory
Summary. The leakage analysis (Welch t-test) on over 30 million traces did not show statistically significant first- and second-order differences between trace sets with fixed and random inputs. The template-based DPA analysis, on the pseudo-random trace set for the profiling phase (15 million traces) and on a sub-set of 300k fix input traces for matching phase targeting the first-round S-box output, and template attack on ciphertext, did not indicate any potential information leakage.”
“The results for the soft IP presented in the report were obtained on the TOE which is the basic hardware implementation of the soft IP without additional levels of security (e.g. that are present in a secure silicon layout). Therefore the internal strength of the soft IP itself was evaluated. This indicates that the investigated features and parameters of the soft IP implementation should be robust against SCA and fault injection attacks in different implementations including ASIC. Nevertheless, according to the Common Criteria rules, the strength of the final composite product must be evaluated on its own
Request Technical Details