Security & Quality
Through continuous innovation and improvement we deliver the highest level of quality and security in every product
Our Quality Policy
SiFive’s mission is to create the best computing solutions in the world to enable our customers to deliver differentiated, best-in-class products in the markets they serve. Our focus is on providing product excellence, predictable execution, and outstanding customer support. We comply with commitments to our customers, requirements of regulatory agencies, and our own business processes. We are committed to continually improving our products, services, and our business processes.
Security Solutions
SiFive offers the most robust security solutions for RISC-V. In fact, we recently donated our WorldGuard security solutions to RISC-V international to make them easily available to the broader ecosystem.
SiFive Shield
SiFive® Shield™ is an open, scalable platform architecture designed to enable system-level security of RISC-V SoCs and offers multiple layers of security, to address different threats. SiFive Shield and WorldGuard enable a scalable architecture with the ability to offer greater isolation.
WorldGuard
WorldGuard is a security model for isolated code execution and data protection. It offers SoC-level information and advanced isolation control, based on multiple levels of privilege per world, and an unlimited amount of worlds. It includes multi-domain security to offer data protection for core, cache, interconnect, peripheral, and memory.
Physical Memory Protection (PMP) provides memory isolation for code and data manipulated by the CPU. With WorldGuard hardware isolation expands to the whole SoC to protect caches, interconnects, arbitrary bus masters, memories and peripherals. A wgMarker adds a World ID to all transactions that are issued by that CPU core. This is then propagated through the interconnect to peripherals and memories where access controls are enforced. Feature-rich OS, applications, and Trusted Execution Environments (TEE) can be isolated and protected inside a multi-core system.
Threat Prevention
Secure SoC design is enabled by accurate threat modeling. Inside an SoC, the flow of information for processing requires an array of technologies. To deter physical tamper attacks, fault detectors for the SoC ensure that operation continues as intended. Physical Memory Protection (PMP) and Physical Memory Attributes (PMA) are supported in the RISC-V ISA and leveraged by SiFive Shield to set limitations on memory ranges and memory-mapped peripherals by privilege, enabling scalable domain security.
Verified Crypto-Engines
The SiFive Shield architecture includes both RISC-V vector crypto extensions for high-throughput AES and SHA operations but also a dedicated AES cryptographic engine that is protected against SPA/DPA/EMA attacks and that offers block cipher and authenticated encryption support. Secure hash like SHA-2 and public Key cryptography such as ECDSA are also offered. In addition, a 100% digital NIST SP 800-90A/B/C compliant true random number generator (TRNG) enables cryptographic or entropy-based secure feature.
The security of our products is of the utmost importance. If you’d like to submit a potential vulnerability or have security questions, please visit our Product Security Incident Response Team (PSIRT) page.