Single module for multiple security challenges
The eSecure IP is a complete standalone module that enables security applications by shielding the secret information from the non-secure application running on the main processor. The firewall prevents any unauthorized access to the secret data. The secure controller embedded in the eSecure module keeps full control of the execution of the security functions. In some designs, the secure controller can be optionally virtualized in the host processor.
Device unique identity
Secure storage of secret information
- Secure Boot
- Firmware update in the field
- Secure key storage
- Cryptography algorithms off-loading
- Side Channel Attack protection
- Secure Debugging
- Key Management
- Low power and high performance
- Very wide range of cryptographic algorithms supported
Efficient secure hardware solution for any application
The eSecure IP is a very efficient solution to enable any secure application on chip. The hardware module shielded from the main processor brings a high level of security. Also the hardware offloading of the cryptographic operations from the main processor to the eSecure module guarantees a low power operation. The eSecure module is tuned to the target application in terms of feature and performance.
Most secure chips involve one or multiple tamper detection mechanisms. The advanced anti-tampering management unit of the eSecure IP enables fine control of the tamper detection source, and actions to be taken when an event occurs, such as instantaneous zeroisation of the secret data. The configurability of the unit makes it suitable for basic up to advanced security requirements.
Scalable cryptographic engine
The scalable cryptographic engine supports symmetric encryption (AES, DES, SM4, …), asymmetric operations (ECDSA, ECDH, RSA, SM2, …), hashing (SHA-1, SHA-256, SM3, …) and random number generation. The cryptographic engine can be configured to reach the performance level required by your application, enabling efficient offloading of the main CPU.
- Wireless Communication (Wifi, thread protocol, Zigbee, BLE..)
- V2V, V2X
- Secure Communication (TLS/DTLS, IPSec, 5G, others)
- Disk Encryption
- General MCU/MPU
- Home Automation
- General MCU/MPU
- Smart Cities
- Data Center