--- title: Define the trust boundary | Garmo Labs url: https://garmolabs.com/marketplace/collections/trust description: Garmo Labs chips, software and semiconductor IP. --- THE GARMO IP MARKETPLACE # Define the trust boundary Find authorization, cryptography and system-protection mechanisms. [Browse all 512 IPs](https://garmolabs.com/marketplace) [Explore families ](https://garmolabs.com/marketplace/families) [Review compatibility ](https://garmolabs.com/gsp/composer) 01 ## Request 02 ## authority 03 ## protected action Editorial selection by documented role and evidence priority. Membership does not establish mutual compatibility; inspect exact releases in the composer. ## 41 selected technologies. [Understand the evidence ](https://garmolabs.com/marketplace/evidence) Security & cryptography [## Chiplet Admission Firewall](https://garmolabs.com/ip/chiplet-admission-firewall-ip-2014) Chiplet admission, quarantine and trust-boundary engine Executed digital evidence IP-2014 · Executed digital evidence Security & cryptography [## SONJE Memory-Fabric Authority / Epoch Enforcement Architecture](https://garmolabs.com/ip/sonje-memory-fabric-authority-epoch-enforcement-architecture-ip-3895) Checks requesting domain, read/write permission masks and revocation epoch at the point where memory work is accepted. Executed digital evidence IP-3895 · Executed digital evidence Security & cryptography [## SONJE-P64 PASID / IOMMU / Authority-Version-Lock Access Guard RTL](https://garmolabs.com/ip/sonje-p64-pasid-iommu-authority-version-lock-access-guard-rtl-ip-3938) Enforces PASID, domain, epoch, permission, expected-version and lock eligibility together at P64 memory acceptance. Executed digital evidence IP-3938 · Executed digital evidence Security & cryptography [## ORAX Trust FW-100](https://garmolabs.com/ip/orax-trust-fw-100-ip-2000) Trust/security product Executed digital evidence IP-2000 · Executed digital evidence Security & cryptography [## ORAX Trust PM-100](https://garmolabs.com/ip/orax-trust-pm-100-ip-2001) Trust/security product Executed digital evidence IP-2001 · Executed digital evidence Security & cryptography [## KX AES Engine](https://garmolabs.com/ip/kx-aes-engine-ip-2842) Digital RTL implementation indexed as kx_aes_engine. The recorded role is aes engine; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2842 · Internal physical evidence Security & cryptography [## KX Crypto AES Gcm](https://garmolabs.com/ip/kx-crypto-aes-gcm-ip-2929) Digital RTL implementation indexed as kx_crypto_aes_gcm. The recorded role is crypto aes gcm; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2929 · Internal physical evidence Security & cryptography [## KX Crypto Blake2](https://garmolabs.com/ip/kx-crypto-blake2-ip-2930) Digital RTL implementation indexed as kx_crypto_blake2. The recorded role is crypto blake2; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2930 · Internal physical evidence Security & cryptography [## KX Crypto Dilithium](https://garmolabs.com/ip/kx-crypto-dilithium-ip-2931) Digital RTL implementation indexed as kx_crypto_dilithium. The recorded role is crypto dilithium; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2931 · Internal physical evidence Security & cryptography [## KX Crypto Drbg](https://garmolabs.com/ip/kx-crypto-drbg-ip-2932) Digital RTL implementation indexed as kx_crypto_drbg. The recorded role is crypto drbg; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2932 · Internal physical evidence Security & cryptography [## KX Crypto Ed25519](https://garmolabs.com/ip/kx-crypto-ed25519-ip-2933) Digital RTL implementation indexed as kx_crypto_ed25519. The recorded role is crypto ed25519; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2933 · Internal physical evidence Security & cryptography [## KX Crypto Kdf](https://garmolabs.com/ip/kx-crypto-kdf-ip-2934) Digital RTL implementation indexed as kx_crypto_kdf. The recorded role is crypto kdf; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2934 · Internal physical evidence Security & cryptography [## KX Crypto Kyber](https://garmolabs.com/ip/kx-crypto-kyber-ip-2935) Digital RTL implementation indexed as kx_crypto_kyber. The recorded role is crypto kyber; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2935 · Internal physical evidence Security & cryptography [## KX Crypto Rng](https://garmolabs.com/ip/kx-crypto-rng-ip-2936) Digital RTL implementation indexed as kx_crypto_rng. The recorded role is crypto rng; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2936 · Internal physical evidence Security & cryptography [## KX Crypto Sha3](https://garmolabs.com/ip/kx-crypto-sha3-ip-2937) Digital RTL implementation indexed as kx_crypto_sha3. The recorded role is crypto sha3; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2937 · Internal physical evidence Security & cryptography [## KX ECC P256](https://garmolabs.com/ip/kx-ecc-p256-ip-2976) Digital RTL implementation indexed as kx_ecc_p256. The recorded role is ecc p256; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2976 · Internal physical evidence Security & cryptography [## KX Firewall](https://garmolabs.com/ip/kx-firewall-ip-2990) Digital RTL implementation indexed as kx_firewall. The recorded role is firewall; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-2990 · Internal physical evidence Security & cryptography [## KX HMAC](https://garmolabs.com/ip/kx-hmac-ip-3019) Digital RTL implementation indexed as kx_hmac. The recorded role is hmac; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-3019 · Internal physical evidence Security & cryptography [## KX PUF](https://garmolabs.com/ip/kx-puf-ip-3119) Digital RTL implementation indexed as kx_puf. The recorded role is puf; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-3119 · Internal physical evidence Security & cryptography [## KX RSA Modexp](https://garmolabs.com/ip/kx-rsa-modexp-ip-3158) Digital RTL implementation indexed as kx_rsa_modexp. The recorded role is rsa modexp; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-3158 · Internal physical evidence Security & cryptography [## KX SHA256](https://garmolabs.com/ip/kx-sha256-ip-3173) Digital RTL implementation indexed as kx_sha256. The recorded role is sha256; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-3173 · Internal physical evidence Security & cryptography [## KX Secure Enclave](https://garmolabs.com/ip/kx-secure-enclave-ip-3168) Digital RTL implementation indexed as kx_secure_enclave. The recorded role is secure enclave; exact interfaces, parameters and functional coverage are release-bound. Internal physical evidence IP-3168 · Internal physical evidence Security & cryptography [## BASSIN Block-Atomic Secure Stream Processor Architecture](https://garmolabs.com/ip/bassin-block-atomic-secure-stream-processor-architecture-ip-3952) Distinct TDB-oriented processor architecture combining producer-ID dataflow issue, block commit/abort, capability-native memory access and a no-speculation design intent. Source / reference evidence IP-3952 · Source / reference evidence Security & trust [## KENBE Authority Guard](https://garmolabs.com/ip/kenbe-authority-guard) Checks memory request domain/authority permissions. RTL + models IP-4017 · Source / reference evidence Security & trust [## KENBE Certified-Crypto Boundary](https://garmolabs.com/ip/kenbe-certified-crypto-boundary) Boundary/control contract to qualified encryption/authentication macros without toy cryptography. RTL + models IP-4018 · Source / reference evidence Security & trust [## KENBE Epoch / Version Guard](https://garmolabs.com/ip/kenbe-epoch-version-guard) Rejects stale epoch/version operations under the KENBE transaction contract. RTL + models IP-4019 · Source / reference evidence Security & cryptography [## KOURAN Authority-Epoch-Domain-Version Security Composition](https://garmolabs.com/ip/kouran-authority-epoch-domain-version-security-composition-ip-3643) Composite KOURAN security model combines authority/bounds/rights, epoch revocation, domain isolation, object versioning, replay checks and an external hardened cryptographic boundary. Source / reference evidence IP-3643 · Source / reference evidence Security & cryptography [## KOURAN Continuation Token Execution Model](https://garmolabs.com/ip/kouran-continuation-token-execution-model-ip-3632) Execution is driven by continuation tokens rather than SKYRA hyperblocks; a continuation becomes eligible when dependency tokens, authority state and expected object version satisfy the architectural contract. Source / reference evidence IP-3632 · Source / reference evidence Security & cryptography [## LAKOU Effect Ledger Atomic Commit Architecture](https://garmolabs.com/ip/lakou-effect-ledger-atomic-commit-architecture-ip-3826) Accumulates externally visible side effects in a ledger and discards them on fault, authority failure, version conflict or abort, enabling precise recovery without whole-graph rollback. Source / reference evidence IP-3826 · Source / reference evidence Security & cryptography [## OmniRT + Monolithic 3D FeFET Universal Memory System v5.0.0-AXI Engineering](https://garmolabs.com/ip/omnirt-monolithic-3d-fefet-universal-memory-system-v5-0-0-axi-engineering-ip-4327) Standalone integrated engineering system combining differential FeFET universal-memory/CIM architecture, ECC/program-verify control, scrub/MBIST/BISR/remap/wear telemetry, AXI4-Lite + Wishbone software integration, bare-metal driver and OmniRT runtime policy/model surfaces. Source / reference evidence IP-4327 · Source / reference evidence Security & cryptography [## SKYRA Security Island Architecture](https://garmolabs.com/ip/skyra-security-island-architecture-ip-2588) Composite security model spanning native capability checks, TEE isolation, secure/measured boot root, memory-encryption boundary, epoch revocation, and side-channel hooks. Source / reference evidence IP-2588 · Source / reference evidence Security & trust [## Garmo-AES-256-GCM](https://garmolabs.com/ip/garmo-aes-256-gcm) Multi-context authenticated-encryption datapath architecture. Evaluation package IP-2083 · Source documented Security & trust [## Garmo-PUF-Core](https://garmolabs.com/ip/garmo-puf-core) Security — multi-source silicon PUF root-key subsystem Evaluation package IP-2081 · Source documented Security & trust [## Garmo-Secure-Boot](https://garmolabs.com/ip/garmo-secure-boot) Security — post-quantum-ready root of trust and secure boot Evaluation package IP-2084 · Source documented Security & trust [## Garmo-Side-Channel-Guard](https://garmolabs.com/ip/garmo-side-channel-guard) Security — side-channel/fault-resistance execution wrapper Evaluation package IP-2085 · Source documented Security & trust [## Garmo-TRNG-HW](https://garmolabs.com/ip/garmo-trng-hw) Security — high-rate multi-entropy TRNG subsystem Evaluation package IP-2082 · Source documented Security & trust [## KENBE-PERSIST](https://garmolabs.com/ip/kenbe-persist) Journaled commit groups, persist barriers, write-intent and replay/recovery contracts. RTL + models IP-3995 · Source documented Security & trust [## KENBE-SECURE](https://garmolabs.com/ip/kenbe-secure) Domain/authority/epoch/version/replay/integrity control with certified crypto macro boundary. RTL + models IP-3996 · Source documented Security & trust [## FPP-1](https://garmolabs.com/ip/fpp-1) A generation/profile record within the first-principles FPP packaging family. Architecture IP IP-165 · Architecture / contract Security & trust [## GSC — System Composer](https://garmolabs.com/ip/gsc-system-composer) Composes IP/chiplets/packages from capability and compatibility manifests Architecture IP IP-153 · Architecture / contract Security & trust [## GTG — Tile Guardian](https://garmolabs.com/ip/gtg-tile-guardian) Isolation, fault containment, reset/power policy, test and telemetry supervision Architecture IP IP-113 · Architecture / contract ## Your next big idea. Let’s build it together. Start with a chip, a software release or a single IP block. [Talk to Garmo](https://garmolabs.com/contact) [Start exploring](https://garmolabs.com/developers)