STSAFE-A110 datasheet(7/36 Pages) STMICROELECTRONICS

7 / 36 page

DS13039 Rev 1

7/36

STSAFE-A110

Description

The STSAFE-A110 secure element supports the following features:

•

Authentication

The STSAFE-A110’s authentication service provides proof to a remote or local host

that a certain peripheral or IoT is legitimate. An equipment manufacturer can thus

ensure that only authentic peripherals like accessories or consumables can be used in

conjunction with the original equipment. In the same way, a service provider can make

sure that its service only operates with the appropriate IoT device.

The authentication service utilizes the ECC cryptographic scheme with NIST or

Brainpool 256-bit and 384-bit curves. It also uses the widely deployed ECDSA

signature scheme with SHA-256 and SHA-384 for generating digital signatures. In

addition, it is compatible with the USB Type-C and Qi power charging authentication

scheme.

•

Secure-channel key establishment (TLS)

The STSAFE-A110 assists the local host in establishing a secure connection between

the device and a remote host (such as a cloud server or gateway).It assists the local

host in establishing the session keys used to encrypt and decrypt data exchanges

between the device and the remote host. This key establishment service relies on the

computation of a shared secret based on the elliptic curve Diffie-Hellman schemes

(ECDH and ECDHE) executed after the device has generated and exchanged ECC

NIST or Brain pool public keys with the server.

•

Signature verification

The STSAFE-A110 can verify an elliptic curve digital signature algorithm (ECDSA)

signature by using a public key provided by the local host. This mechanism can offload

a local host application processor with no or limited cryptographic computing power. It

is typically used to verify signatures of firmware in the context of secure boot or secure

firmware update.

•

Secure one-way counters (peripheral usage monitoring)

The manufacturer can limit the usage of disposable accessories or consumables to a

given value by presetting the secure one-way counters. These counters can only be

decremented.

•

Memory partitioning

The STSAFE-A110 comes with 6 Kbytes of non-volatile memory split into areas, whose

read and write access rights can be configured to free access or local host access.

•

Pairing and secure channel with the host

The STSAFE-A110 allows a secure channel to be set up with the local host based on

AES keys for command authorization, command data encryption, response data

encryption and response authentication. Typically, pairing between an STSAFE-A110

and its local host prevents the use of the STSAFE-A110 in a different device and

protects the I²C line from eavesdropping of sensitive information.

•

Wrapping & unwrapping local envelopes

The STSAFE-A110 can be used to encrypt or decrypt data with its local envelope key.

Typically, it can be used when the local host needs to store a secret or a key within its

non-secure data storage area.

•

Symmetric keys

The STSAFE-A110 can be loaded with up to 16 symmetric keys for data encryption and

decryption.

STSAFE-A110 数据表(PDF) 7 Page - STMicroelectronics

STSAFE-A110 数据表(HTML) 7 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

数据表下载