Synopsys发布车规级SRAM PUF安全IP（产品宣传稿，无财务催化）

Combining SRAM-based identity generation with added functional safety and security mechanisms.
By Geert-Jan Schrijen, Peter Simons, and Dana Neustadter
Today’s vehicles are quickly becoming intelligent Physical AI platforms. Capabilities such as advanced driver assistance systems (ADAS), autonomous driving, intelligent cabins, robotic mobility, EV power management, and vehicle-to-everything (V2X) communications now lean heavily on AI models to perceive, reason, and act in the physical world.
In these platforms, trust cannot stop at software and data. Every AI decision — whether detecting an object, planning a path, or controlling the vehicle — is only as reliable as the hardware running it. Counterfeit parts, compromised supply chains, and stolen credentials can erode the integrity of the entire system, and even a single fault in a safety-critical function can put lives at risk.
This dual challenge — cybersecurity and functional safety—is captured in two landmark standards: ISO 26262 for functional safety and ISO/SAE 21434 for automotive cybersecurity. As SoCs grow more complex and pull components from many suppliers, pre-certified, silicon-level security IP shifts from a nice-to-have to a hard requirement. That reality is fueling strong momentum behind Physical Unclonable Functions (PUFs) certified against both standards — technology that draws a device-unique identity straight from intrinsic silicon variations instead of depending on secrets held in nonvolatile memory.
At the heart of this IP is an elegantly simple principle: every SRAM cell powers up with a different random value that depends on local silicon variations. This effectively creates a unique and unclonable silicon fingerprint—a Physical Unclonable Function. From this fingerprint, device-unique cryptographic root keys are derived, which are never stored in non-volatile memory. Instead, they are regenerated from the PUF each time they are needed and only present in the chip for a very short time. Having no keys at rest means that keys are nearly impossible to be cloned, extracted, or stolen, even with physical access to the chip.
What makes the Synopsys approach fundamentally different is its use of standard SRAM—available upon initial release of any process technology. The IP is technology-node agnostic: one design works across every foundry and process node, with no per-node tuning, no custom layout adjustments, and no costly re-qualification. Alternative PUF implementations that rely on custom analog circuits must be tuned and re-qualified for each technology node—adding time, cost, and re-spin risk.
For automotive SoC designers supporting multiple chip variants across long product lifecycles, this means faster time to market, lower integration risk, and significant cost savings.
A key insight from developing this IP is that functional safety and cybersecurity, while analyzed from entirely different angles, converge to a certain extent at the implementation level. Functional safety asks: “Will the device operate correctly when hardware fails?” Cybersecurity asks: “Can an adversary compromise the device’s secrets?” The answers rely on remarkably similar mechanisms.
For functional safety, the Synopsys Automotive PUF incorporates redundant computations, advanced error correction, and memory integrity checks. It continuously validates all inputs and critical internal logic, flagging faults at two severity levels: recoverable errors (the system can continue operating) and critical errors (the system must take protective action). This gives the host SoC the information it needs to decide whether the vehicle can safely continue or must stop.
For cybersecurity, the IP includes side-channel countermeasures, fault-injection protections, and integrity protections on all data paths. A full threat analysis and risk assessment (TARA) was conducted to identify and close potential attack vectors—ensuring no backdoors exist, and that key material remains inaccessible to adversaries.
The synergy is powerful: redundancy mechanisms for functional safety also improve availability—a core cybersecurity requirement—while integrity protections for cybersecurity directly strengthen fault detection. The result is a single, efficient IP that satisfies both standards.
As vehicles become software-defined and V2X communications demand high-frequency authentication, a strong, hardware-rooted identity tied to each chip becomes essential—not optional.
The Synopsys Automotive PUF Premium is designed to provide exactly that foundation, combining SRAM-based identity generation with added functional safety and security mechanisms. The block diagram below illustrates how the IP integrates into the SoC, connecting to the host processor, DMA engine, system memory, NVM, and security subsystems (Figure 1).
Fig. 1: Synopsys Automotive PUF Premium IP — High-level block diagram showing integration into the SoC.
Key features include:
Synopsys Automotive PUF Premium is backed by a comprehensive set of safety and security deliverables that streamline integration and accelerate certification:
The value of a PUF-based root of trust extends across every stage of the automotive lifecycle. In manufacturing, the PUF eliminates the need to inject sensitive root keys from external systems—the chip generates its own unique secret internally, avoiding the complexity and cost of secure provisioning infrastructure.
In the field, the PUF enables strong device authentication for V2X communications, secure boot that verifies firmware integrity before execution, and encrypted data binding that ensures sensitive information is accessible only on the specific chip it was created for. For over-the-air (OTA) updates—now standard for connected vehicles—the PUF provides the cryptographic anchor ensuring updates are authentic and untampered.
Automotive environments are unforgiving—but Synopsys SRAM PUF technology is built to withstand them. It has been extensively characterized from −40°C to 150°C, across voltage extremes, and over decades of accelerated silicon aging. Advanced algorithms for error correction, data de-biasing, and anti-aging keep PUF values rock-solid throughout the entire product lifecycle. The result is reliability backed by peer-reviewed research and validated in more than 1.5 billion deployed devices.
The Synopsys Automotive PUF meets the stringent functional safety and cybersecurity requirements in a single, certified IP. It is battle-tested, built on more than two decades of SRAM PUF research driven by recognized world-leading experts and over 15 years of deployment in aerospace and defense/government markets—environments where the margin for error is effectively zero. That same proven foundation extends naturally to adjacent mission-critical markets—from industrial robotics requiring functional safety to medical devices where patient safety depends on uncompromising device integrity (Figure 2).
Fig. 2: Extending hardware root of trust across mission-critical markets.
As the automotive industry accelerates toward autonomous driving, electrification, and pervasive connectivity, the security and safety of every silicon component are non-negotiable. The Synopsys Automotive PUF Premium IP is the industry’s first PUF IP to deliver both ISO 26262/ASIL B functional safety and ISO/SAE 21434 cybersecurity compliance in a single, proven solution—backed by SRAM PUF technology deployed in over 1.5 billion devices and certified at the highest industry levels, including PSA Certified Level 3, SESIP Level 3, CC EAL6+, and FIPS 140-3 readiness.
For automotive SoC designers, this means a faster, lower-risk path to compliance—with a root of trust that integrates seamlessly across any foundry and process node, requires no per-technology tuning, and has been battle-tested across the most extreme operating conditions on the planet.
Learn more: Visit the Synopsys PUF Premium web page and download the Synopsys PUF datasheet.
Peter Simons is ASIC digital design manager for Security IP Solutions at Synopsys.
Dana Neustadter is senior director, product management for Security IP Solutions at Synopsys.