By Geert-Jan Schrijen, Peter Simons, and Dana Neustadter Today’s vehicles are quickly becoming intelligent Physical AI platforms. Capabilities such as advanced driver assistance systems (ADAS), autonomous driving, intelligent cabins, robotic mobility, EV power management, and vehicle-to-everything (V2X) communications now lean heavily on AI models to perceive, reason, and act in the physical world. In these platforms, trust cannot stop at software and data. Every AI decision — whether detecting an object, planning a path, or controlling the vehicle — is only as reliable as the hardware running it. Counterfeit parts, compromised supply chains, and stolen credentials can erode the integrity of the entire system, and even a single fault in a safety-critical function can put lives at risk. This dual challenge — cybersecurity and functional safety—is captured in two landmark standards: ISO 26262 for functional safety and ISO/SAE 21434 for automotive cybersecurity. As SoCs grow more complex and pull components from many suppliers, pre-certified, silicon-level security IP shifts from a nice-to-have to a hard requirement. That reality is fueling strong momentum behind Physical Unclonable Functions (PUFs) certified against both standards — technology that draws a device-unique identity straight from intrinsic silicon variations instead of depending on secrets held in nonvolatile memory. Why SRAM PUF is the ideal root of trust for automotive At the heart of this IP is an elegantly simple principle: every SRAM cell powers up with a different random value that depends on local silicon variations. This effectively creates a unique and unclonable silicon fingerprint—a Physical Unclonable Function. From this fingerprint, device-unique cryptographic root keys are derived, which are never stored in non-volatile memory. Instead, they are regenerated from the PUF each time they are needed and only present in the chip for a very short time. Having no keys at rest means that keys are nearly impossible to be cloned, extracted, or stolen, even with physical access to the chip. What makes the Synopsys approach fundamentally different is its use of standard SRAM—available upon initial release of any process technology. The IP is technology-node agnostic: one design works across every foundry and process node, with no per-node tuning, no custom layout adjustments, and no costly re-qualification. Alternative PUF implementations that rely on custom analog circuits must be tuned and re-qualified for each technology node—adding time, cost, and re-spin risk. For automotive SoC designers supporting multiple chip variants across long product lifecycles, this means faster time to market, lower integration risk, and significant cost savings. Safety and security: Two sides of the same coin A key insight from developing this IP is that functional safety and cybersecurity, while analyzed from entirely different angles, converge to a certain extent at the implementation level. Functional safety asks: “Will the device operate correctly when hardware fails?” Cybersecurity asks: “Can an adversary compromise the device’s secrets?” The answers rely on remarkably similar mechanisms. For functional safety, the Synopsys Automotive PUF incorporates redundant computations, advanced error correction, and memory integrity checks. It continuously validates all inputs and critical internal logic, flagging faults at two severity levels: recoverable errors (the system can continue operating) and critical errors (the system must take protective action). This gives the host SoC the information it needs to decide whether the vehicle can safely continue or must stop. For cybersecurity, the IP includes side-channel countermeasures, fault-injection protections, and integrity protections on all data paths. A full threat analysis and risk assessment (TARA) was conducted to identify and close potential attack vectors—ensuring no backdoors exist, and that key material remains inaccessible to adversaries. The synergy is powerful: redundancy mechanisms for functional safety also improve availability—a core cybersecurity requirement—while integrity protections for cybersecurity directly strengthen fault detection. The result is a single, efficient IP that satisfies both standards. Inside the automotive PUF: Architecture and features As vehicles become software-defined and V2X communications demand high-frequency authentication, a strong, hardware-rooted identity tied to each chip becomes essential—not optional. The Synopsys Automotive PUF Premium is designed to provide exactly that foundation, combining SRAM-based identity generation with added functional safety and security mechanisms. The block diagram below illustrates how the IP integrates into the SoC, connecting to the host processor, DMA engine, system memory, NVM, and security subsystems (Figure 1).
Fig. 1: Synopsys Automotive PUF Premium IP — High-level block diagram showing integration into the SoC. Key features include:
- Automotive Compliant & Certified: ISO 26262 (ASIL B Random, ASIL D Systematic) functional safety; ISO/SAE 21434 cybersecurity.
- 256-bit Key Entropy: High-strength cryptographic root keys derived from SRAM PUF.
- NIST-Compliant Random Bit Generator: On-chip random number generation per NIST SP 800-90 A/B/C.
- Device-Unique Keys with Key Derivation & Wrapping: Unlimited keys created, wrapped, and stored securely—even in unprotected NVM.
- On-Chip Enrollment: The chip generates its own root secret internally—no external key injection required, simplifying manufacturing and supply chain security.
- Secure Key Output: Controlled release of derived keys to other crypto modules via a dedicated hardware path.
- PUF Monitoring & Built-In Self-Test (Logic BIST): Health monitoring and self-diagnostics for in-field reliability assurance.
- Hardware Context Inputs: Lifecycle management support for secure state transitions from manufacturing through end-of-life.
- Custom Hardware Personalization: Configurable personalization for application-specific requirements.
- Security Countermeasures: Advanced protections against side-channel attacks, fault injection, and reverse engineering.
Synopsys Automotive PUF Premium is backed by a comprehensive set of safety and security deliverables that streamline integration and accelerate certification:
- ISO 26262 functional safety: Quality Manual, DFMEA, FMEDA, Safety Manual, DFA, Safety Case Report, ISO 26262 Assessment Report
- ISO/SAE 21434 cybersecurity: Interface Report, Security Risk Analysis Report, Cybersecurity Case Report, Assessment Report, IP-SIRT services
Securing the full automotive lifecycle The value of a PUF-based root of trust extends across every stage of the automotive lifecycle. In manufacturing, the PUF eliminates the need to inject sensitive root keys from external systems—the chip generates its own unique secret internally, avoiding the complexity and cost of secure provisioning infrastructure. In the field, the PUF enables strong device authentication for V2X communications, secure boot that verifies firmware integrity before execution, and encrypted data binding that ensures sensitive information is accessible only on the specific chip it was created for. For over-the-air (OTA) updates—now standard for connected vehicles—the PUF provides the cryptographic anchor ensuring updates are authentic and untampered. Battle-tested. Mission-ready. Automotive environments are unforgiving—but Synopsys SRAM PUF technology is built to withstand them. It has been extensively characterized from −40°C to 150°C, across voltage extremes, and over decades of accelerated silicon aging. Advanced algorithms for error correction, data de-biasing, and anti-aging keep PUF values rock-solid throughout the entire product lifecycle. The result is reliability backed by peer-reviewed research and validated in more than 1.5 billion deployed devices. The Synopsys Automotive PUF meets the stringent functional safety and cybersecurity requirements in a single, certified IP. It is battle-tested, built on more than two decades of SRAM PUF research driven by recognized world-leading experts and over 15 years of deployment in aerospace and defense/government markets—environments where the margin for error is effectively zero. That same proven foundation extends naturally to adjacent mission-critical markets—from industrial robotics requiring functional safety to medical devices where patient safety depends on uncompromising device integrity (Figure 2).
Fig. 2: Extending hardware root of trust across mission-critical markets. Setting the bar for automotive silicon security As the automotive industry accelerates toward autonomous driving, electrification, and pervasive connectivity, the security and safety of every silicon component are non-negotiable. The Synopsys Automotive PUF Premium IP is the industry’s first PUF IP to deliver both ISO 26262/ASIL B functional safety and ISO/SAE 21434 cybersecurity compliance in a single, proven solution—backed by SRAM PUF technology deployed in over 1.5 billion devices and certified at the highest industry levels, including PSA Certified Level 3, SESIP Level 3, CC EAL6+, and FIPS 140-3 readiness. For automotive SoC designers, this means a faster, lower-risk path to compliance—with a root of trust that integrates seamlessly across any foundry and process node, requires no per-technology tuning, and has been battle-tested across the most extreme operating conditions on the planet. Learn more: Visit the
Synopsys PUF Premium web page and download the
Synopsys PUF datasheet. Peter Simons is ASIC digital design manager for Security IP Solutions at Synopsys. Dana Neustadter is senior director, product management for Security IP Solutions at Synopsys. The post
Certified Automotive-Grade PUF IP: Unclonable Silicon Identity For Safety And Security appeared first on
Semiconductor Engineering.
Source:
https://semiengineering.com/certified-a ... -security/