SSA-400332 V1.1 (Last Update: 2022-11-08): Insufficient Design IP Protection in IEEE 1735 Recommended Practice - Impact to Questa and ModelSim

A security research [1] identified weaknesses in the IEEE 1735 recommended practice for encryption of Design IP, which could allow a sophisticated attacker access to unencrypted Design IP data in IEEE 1735-compliant products. This advisory addresses the specific details for the affected Siemens software products: Questa and ModelSim simulators.

Siemens is preparing updates and recommends specific countermeasures for Questa and ModelSim.

[1] https://arxiv.org/abs/2112.04838

access addresses advisory attacker data design encryption ieee impact ip protection practice products protection research security security research ssa unencrypted update weaknesses