CVE-2017-13097: The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement

Security readout for executives and security teams

CVE-2017-13097 concerns weaknesses in the IEEE P1735 approach for protecting electronic-design intellectual property. In affected implementations, encrypted design IP may not reliably protect ownership or licensing rules, and severe cases may expose the underlying plaintext design. The business risk is IP theft, unauthorized use, and weakened licensing controls. Exposure is most likely in semiconductor, EDA, FPGA, ASIC, or IP-vendor workflows that rely on IEEE P1735-encrypted design IP. Risk depends on the specific implementation, toolchain, and how encrypted IP is exchanged or trusted. Prioritize review if the organization creates, licenses, shares, or consumes valuable electronic-design IP. The key concern is loss of confidentiality and license control, not ordinary server compromise. Treat urgency as high where P1735-protected IP underpins revenue or strategic designs. Mitigation focus: Inventory where IEEE P1735-encrypted IP is used or accepted.; Check EDA tool and IP vendor guidance for CVE-2017-13097 or VU#739007.; Do not treat P1735 encryption alone as sufficient IP protection..

Prepared

Jun 7, 2026, 13:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.