A system comprising: configuration storage configured to store configuration data; programmable logic operably coupled to the configuration storage and configured by the configuration data at the configuration storage, wherein the programmable logic is configured by the configuration data to comprise a key generation logic; the key generation logic is configured to read a portion of the configuration data from the configuration storage and to generate a cryptographic key by combining the portion of the configuration data read from the configuration storage with one or more inputs to the key generation logic, wherein the portion of the configuration data comprises static data that does not change when loaded into the configuration storage, an internal configuration port configured to enable access to the configuration storage, wherein the key generation logic is configured to read the at least a portion of the configuration data from the configuration storage via the internal configuration port; and a cryptographic engine configured to utilize at least the cryptographic key to perform a cryptographic operation, wherein the configuration storage is further configured to receive updated configuration data based at least in part on reconfiguration data (28, 32); and wherein in response to a reconfiguration, the key generation logic is configured to read the updated configuration data and to generate the cryptographic key by combining at least a portion of the updated configuration data (26, 34) with the static data from the configuration storage and with the one or more inputs to the key generation logic. configuration storage configured to store configuration data; programmable logic operably coupled to the configuration storage and configured by the configuration data at the configuration storage, wherein the programmable logic is configured by the configuration data to comprise a key generation logic; the key generation logic is configured to read a portion of the configuration data from the configuration storage and to generate a cryptographic key by combining the portion of the configuration data read from the configuration storage with one or more inputs to the key generation logic, wherein the portion of the configuration data comprises static data that does not change when loaded into the configuration storage, an internal configuration port configured to enable access to the configuration storage, wherein the key generation logic is configured to read the at least a portion of the configuration data from the configuration storage via the internal configuration port; and a cryptographic engine configured to utilize at least the cryptographic key to perform a cryptographic operation, wherein the configuration storage is further configured to receive updated configuration data based at least in part on reconfiguration data (28, 32); and wherein in response to a reconfiguration, the key generation logic is configured to read the updated configuration data and to generate the cryptographic key by combining at least a portion of the updated configuration data (26, 34) with the static data from the configuration storage and with the one or more inputs to the key generation logic. wherein the configuration storage is further configured to receive updated configuration data based at least in part on reconfiguration data (28, 32); and wherein in response to a reconfiguration, the key generation logic is configured to read the updated configuration data and to generate the cryptographic key by combining at least a portion of the updated configuration data (26, 34) with the static data from the configuration storage and with the one or more inputs to the key generation logic.