Cisco Technology, Inc.

Acano (uk) Limited

Tzachy Reinman

Yaacov Belenky

Aviad Kipnis

Erez Waisbard

Michael Kara-Ivanov

Yair Fodor

Efraim Mangell

Tsion Shamay

In one embodiment, an apparatus includes a non-volatile memory, a one-time programmable (OTP) memory, and a processor operative to write data values to the non-volatile memory and then initiate programming of a first bit of the OTP memory, the first bit being associated with locking the non-volatile memory from further data being written thereto, and after the non-volatile memory has been locked from further data being written thereto, initiate programming of the second bit of the OTP memory in order to lock the non-volatile memory from further data being erased therefrom.

Secure storage apparatus

A method, system and apparatus for deriving a secondary secret from a root secret are described, the method, system and apparatus including reserving a memory buffer included in an integrated circuit, the memory buffer being large enough to contain all of the bits which will include the secondary secret, receiving a plurality of bits from a root secret, the root secret being stored in a secure memory of the integrated circuit, inputting the plurality of bits from the root secret and at least one control bit into a permutation network, and thereby producing a multiplicity of output bits, the at least one control bit including one of one bit of a value g, and one bit an output of a function which receives g as an input, receiving the multiplicity of output bits from the permutation network, inputting the multiplicity of output bits from the permutation network into a plurality of logic gates, thereby combining the multiplicity of output bits, wherein a fixed number of bits is output from the logic gates, inputting the fixed number of bits output by the logic gates into an error correcting code module, the fixed number of bits output by the logic gates including a first group of intermediate output bits and a second group of intermediate output bits and receiving output bits from the error correcting code module, the output bits of the error correcting code module including the first group of intermediate output bits as changed by the error correcting code module, where the change depends on the second group of intermediate output bits, filling non-filled registers in the reserved memory buffer with the first group of intermediate output bits as changed by the error correcting code module, and repeating the steps of 'receiving a plurality of bits from a root secret' through 'filling non-filled registers in the reserved memory buffer' until the entire secondary secret is derived, wherein the steps of &#x201c;receiving a plurality of bits from a root secret&#x201d; through &#x201c;filling non-filled registers in the reserved memory buffer&#x201d; are performed in a single clock cycle of the integrated circuit. Related apparatus, methods and systems are also described.

Secrets renewability

Growing community of inventors

Elazar, Israel

Tzachy Reinman