In 7 series devices, private key encryption and authentication of the bitstream is supported with the SEM IP. Bitstream encryption using AES-256 along with SHA2-256 HMAC for authentication has been verified to be compatible with SEM IP in hardware.
In Zynq™ 7000 SoC devices, the same private key encryption and authentication of the bitstream is also supported with SEM IP.
Public key authentication using RSA-2048 has not been verified, and as a result, is not supported by the SEM IP.