DICE, developed and backed by the Trusted Computing Group, is a simple and reliable method that can be implemented in the hardware of security products during manufacturing. The architecture breaks up the boot process into layers and creates unique secrets along with a measure of integrity for each layer, automatically re-keying and protecting secrets if malware is present.
One of the key benefits of using the secure boot features of the CEC1702 MCU with the DICE standard, says the company, is that it enables equipment manufacturers to create a chain of trust for multiple loads of firmware. This is especially important for customers concerned with authenticating system-critical commands, such as in applications like power plants or online server databases.
"Designing and deploying secure devices remains a significant challenge for developers," says Ian Harris, vice president of Microchip's computing products group. "Implementing security with DICE gives designers confidence that the fundamental security of their device is based on principles that were developed and reviewed by industry experts. Combined with the DICE architecture, the full-featured CEC1702 provides an easy way to add the crucial security and privacy features required by embedded systems."