In Versal devices, the AES engine has the capability of countermeasures, which means protection against DPA attacks. By default, the automotive devices (XA) include the DPA countermeasures. All other devices must be ordered with the following ordering codes to get DPA enabled devices.
- XC/XQ: 100 Million Trace support : SCD #5239
- XC/XQ: 1 Million Trace support: SCD #5278
As another counter measure against DPA attacks, boot images support key rolling to minimize the use of a single AES key. The DPA countermeasures can be used during boot as well as post-boot.