Versal devices have can perform Known Answer Tests on the cryptographic engines before using them. These tests check the integrity of the hardened cryptographic engines before operating on the data.
Known Answer Tests include the following tests:
- SHA-3/384
- RSA-4096
- ECDSA with the NIST P-384 and NIST P-521
- AES-GCM 256-bit with and without the differential power analysis (DPA) counter measure enabled
- TRNG
These tests can be run during boot. The APIs can be called explicitly from an application running on either Cortex-A72 or Cortex-R5F processors and also from a soft processor running in the PL.