STSAFE-A100 datasheet, PDF - EEWORLD Datasheet

STSAFE-A100: Description6KB Authenticator Die; File Size405KB，38 Pages; ManufacturerSTMicroelectronics; Websitehttp://www.st.com/

Download Datasheet Parametric View All

STSAFE-A100 Overview

6KB Authenticator Die

STSAFE-A100 Parametric

Parameter Name	Attribute value
EU restricts the use of certain hazardous substances	Compliant
ECCN (US)	3A991.a.2
Part Status	Unconfirmed
HTS	8542.39.00.01
Encryption Standard	AES-128\|AES-256\|ECC\|ECDH\|SHA-256\|SHA-384
Minimum Endurance (Cycles)	500000
Data Retention (Year)	30
Key Size	128bit@AE/256bit@AES
Memory Size	6KB
Process Technology	CMOS
Interface Type	I2C
Minimum Operating Supply Voltage (V)	1.62
Maximum Operating Supply Voltage (V)	5.5
Minimum Operating Temperature (°C)	-40
Maximum Operating Temperature (°C)	105
Supplier Package	Die
Standard Package Name	Die

Preview

Download Datasheet

View All

STSAFE-A100

Authentication,

state-of-the-art security for peripherals and IoT devices

Datasheet

production data

UFDFPN8 (2 × 3 mm)

SO8N

4 × 5 mm

– Elliptic curve digital signature algorithm

(ECDSA) with SHA-256 and SHA-384 for

digital signature generation and verification

– Elliptic curve Diffie-Hellman (ECDH) for key

establishment

•

Advanced symmetric cryptography

– Key wrapping and unwrapping using AES-

128/AES-256

– Secure channel protocols using AES-128

•

Secure operating system

– Secure STSAFE-A100 kernel for

authentication and data management

– Protection against logical and physical

attacks

Features

•

Authentication (of peripherals, IoT and USB

Type-C devices)

•

Secure channel establishment with remote

host including transport layer security (TLS)

handshake

•

Signature verification service (secure boot and

firmware upgrade)

•

Usage monitoring with secure counters

•

Pairing and secure channel with host

application processor

•

Wrapping and unwrapping of local or remote

host envelopes

•

On-chip key pair generation

Hardware features

•

Highly secure MCU platform

•

6 Kbytes of configurable non-volatile memory

– Highly reliable CMOS EEPROM

technology

– 30 years’ data retention at 25 °C

– 500 000 erase / program cycles endurance

at 25 °C

– 1.62 V to 5.5 V continuous supply voltage

•

Operating temperature:

−40

to 105 °C

Security features

•

Latest generation of highly secure MCUs

– CC EAL5+ AVA_VAN5 Common Criteria

certified

– Active shield

– Monitoring of environmental parameters

– Protection mechanism against faults

– Unique serial number on each die

– Protection against side-channel attacks

•

Advanced asymmetric cryptography

– Elliptic curve cryptography (ECC) with

NIST or Brainpool 256-bit and 384-bit

curves

February 2019

This is information on a product in full production.

Protocol

•

I²C-bus slave interface

– Up to 400 kbps transmission speed (Fast

mode) and true open-drain pads

– 7-bit addressing

Packages

•

ECOPACK

-compliant SO8N 8-lead plastic

small outline and UFDFPN 8-lead ultra thin

profile fine pitch dual flat packages

DS12911 Rev 8

1/38

www.st.com

Contents

STSAFE-A100

Contents

Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

1.1

1.2

1.3

Key function overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

STSAFE-A100’s environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Pin descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Asymmetric cryptography use cases . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

2.1

2.2

2.3

2.4

2.5

2.6

2.7

Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Authentication or data management within signature session . . . . . . . . . . 9

Key Establishment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

TLS Handshake protocol use case . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Entity authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Public Key Signature Verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Applicative data storage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Symmetric cryptography use cases . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.1

3.2

Host secure channel setup use case . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

Wrap/unwrap envelopes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.2.1

3.2.2

Unwrap Issuer Envelope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

Wrapping and unwrapping local envelopes . . . . . . . . . . . . . . . . . . . . . . 22

Command set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Electrical characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5.1

5.2

Absolute maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Power supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5.2.1

5.2.2

5.2.3

5.2.4

5.2.5

Power supply specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Power-on and power-off sequences, and power supply glitch tolerance 28

Reset pin (external reset) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Power-on and reset sequence . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Power consumption optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

5.3

5.4

DC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

AC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Package information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

6.1

6.2

SO8N package information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

UFDFPN8 package information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

DS12911 Rev 8

2/38

STSAFE-A100

•

Secure-channel key establishment (TLS)

Description

The STSAFE-A100 helps encrypt communications between a device and a remote

host (such as a cloud server or gateway). The key establishment service uses the ECC

cryptographic scheme with NIST, or Brainpool 256-bit and 384-bit curves. Moreover, it

computes the shared secret with the widely recognized Diffie-Hellman schemes ECDH

and ECDHE.

•

Signature verification

The STSAFE-A100 can verify an ECDSA signature by using a public key provided by

the local host. This mechanism can offload a local application processor with limited

computing power and no elliptic curve cryptography accelerator. It is typically used for

the secure boot or secure firmware update of the local host.

•

Host authentication

With its public key slot, the STSAFE-A100 can authenticate a local or remote host.

Successful authentication by the STSAFE-A100 grants the local or remote host access

to some authorized commands or memory partitions.

•

Secure one-way counters (peripheral usage monitoring)

The manufacturer can limit the usage of disposable accessories or consumables to a

given value by presetting the secure one-way counters. These counters can only be

decremented.

•

Memory partitioning

The STSAFE-A100 comes with 6 Kbytes of non-volatile memory split into areas, whose

read and write access rights can be configured to free access, local host access or

remote host access.

•

Pairing and secure channel with the host

The STSAFE-A100 allows a secure channel to be set up with the local host based on

AES-128-bit keys for command authorization, command data encryption, response

data encryption and response authentication. Typically, this secure channel prevents

eavesdropping of sensitive information on the I²C line.

•

Wrapping & unwrapping local or remote host envelopes

The STSAFE-A100 can be used to encrypt or decrypt data between the remote host

and the local host. The local host may also use the STSAFE-A100’s

encryption/decryption services to store sensitive data to a local, external storage like

Flash memory.

DS12911 Rev 8

5/38

Recommended Resources

Electronic toy "Morning Bird" circuit

M58481P (TV and audio equipment) 30-function infrared remote control receiving circuit

Low voltage alarm

Fading on and off lighting control circuit

Multi-channel coding remote control switch transmitting circuit

Computer motherboard circuit diagram 815 4_19

Analog chip hotspots concentrated in China, market layout is busy: Analog chip hotspots concentrated in China, market layout is busy 2006-7-19Analog chips and digital chips are like twins. Unlike the high speed and quickness of digital chips, the analog chip family t...; hkn FPGA/CPLD

LQFP208 SOT459-1 Package Library: I'd be grateful! wzpstudy@126.com...; 用劲儿飞吧 PCB Design

Please advise on USB sending completion detection: I use the st usb library, but I don't know how to detect the completion of the transmission? Now I usewhile(GetEPTxStatus(ENDP1) != EP_TX_NAK);but in some cases this judgment does not work. Now I can ...; joe88 stm32/stm8

Xi'an Seven-Axis Robot Arm Application and Programming Competition: [size=3][size=3]Xi'an Seven-axis Robot Arm Application and Programming Competition[/size] [size=3] Three-degree-of-freedom Robot Arm Seven-axis Intelligent Robot Arm Intelligent Car Robot Arm Mechanic...; 中国电子学会 Robotics Development

How to connect GSM module to serial port of ARM board: Question: How to connect the serial port of ARM board to GSM module? Both ARM board and GSM module have female connectors. Is it enough to buy a cable with male connectors at both ends? I bought a GSM...; jvjvzhilian ARM Technology

MPLAB Harmony Learning Part 7 - How to use the debug information system service: [font=微软雅黑][size=5]This article is transferred from Microchip Wheat Field Forum——Author: Cannon Gray Brother[/size][/font] [font=Arial][color=rgb(0, 0, 0)][size=4] [/size][/color][/font] [font=Arial][...; 橙色凯 Microchip MCU

Shortcut: L0 L1 L2 L3 L4 L5 L6 L7 L8 L9 LA LB LC LD LE LF LG LH LI LJ LK LL LM LN LO LP LQ LR LS LT LU LV LW LX LY LZ M0 M1 M2 M3 M4 M5 M6 M7 M8 M9 MA MB MC MD ME MF MG MH MI MJ MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ N0 N1 N2 N3 N4 N5 N6 N7 N8 NA NB NC ND NE NF NG NH NI NJ NK NL NM NN NO NP NQ NR NS NT NU NV NX NZ O0 O1 O2 O3 OA OB OC OD OE OF OG OH OI OJ OK OL OM ON OP OQ OR OS OT OV OX OY OZ P0 P1 P2 P3 P4 P5 P6 P7 P8 P9 PA PB PC PD PE PF PG PH PI PJ PK PL PM PN PO PP PQ PR PS PT PU PV PW PX PY PZ Q1 Q2 Q3 Q4 Q5 Q6 Q8 Q9 QA QB QC QE QF QG QH QK QL QM QP QR QS QT QV QW QX QY R0 R1 R2 R3 R4 R5 R6 R7 R8 R9 RA RB RC RD RE RF RG RH RI RJ RK RL RM RN RO RP RQ RR RS RT RU RV RW RX RY RZ

Popular Components