Features and benefits
2.1 Key benefits
• Plug & Trust for fast and easy design with dedicated product support package for authentication use cases
• Easy integration with different MCU & MPU platforms and OSs (Linux, RTOS, Windows, Android, etc.)
• Turnkey solution ideal for many authentication use cases without the need to write security code
• Secure credential injection for proof of origin check
• Anti-counterfeit solution
• Secure, zero-touch connectivity to public & private clouds
• Real end-to-end security in authentication system from smart metering to smart home appliances
• Ready-to-use example code for each of the key use cases such as device-to-device authentication and originality check 2.2 Key features The A5000 provides a secure and efficient protection for authentication and anti-counterfeit use cases. The efficiency of the security measures is proven by a Common Criteria EAL6+ certification.
The A5000 operates fully autonomously based on an authenticaton software ready to be used. The product comes with a dedicated authentication application. Direct memory access is possible by the fixed functionalities of the NXP Authentication application only. With that, the content from the memory is fully isolated from the host system.
• Built on NXP Integral Security Architecture 3.0 ™
• CC EAL 6+ certified HW and OS
• Effective protection against advanced attacks, including Power Analysis and Fault Attacks of various kinds
• Multiple logical and physical protection layers, including metal shielding, end-to-end encryption, memory encryption, tamper detection
• Support for ECC NIST asymmetric cryptography algorithms,
• Support for AES and DES symmetric cryptographic algorithms for encryption and decryption
• Support for AES Modes: CBC, ECB,CTR,GCM,CCM
• HMAC, CMAC, GMAC, SHA-256/384 operations
• HKDF key derivation function
• Small and very thin footprint HX2QFN20 package (3 × 3 mm) with max 0.33 mm height
• Extended temperature range (-40 °C to 105 °C)
• Standard physical interface I2C Target (Fast mode, up to 1 Mbit/s)
• Secured user flash memory of 8kB for secure data or key storage
• Support for SCP03 protocol (bus encryption and encrypted credential injection) to securely bind the host with the secure authenticator
• TRNG compliant to NIST SP800-90B
• DRBG compliant to NIST SP800-90A
• Support for Automatic detection of the I2C T=1 protocol implementation based on the initial message prologue. Supported protocols:
– NXP SE05x T=1 Over I2C Specification. See [1].
– APDU Transport over SPI/I2C v1.0 | GPC_SPE_172. See [6].
• Matter Ready: A5000 provides the necessary cryptographic functions to support the upcoming Matter standard for connecting smart home devices.