- FIPS compliant RNG and key generation
- Hardware based key protection
- Secure (encrypted) on chip key (ECC, AES, SHA HMAC) and data storage
- Guaranteed Unique 72-bit Serial Number
- Boot validation
- FIPS compliant RNG and key generation
- Hardware based key protection
- Secure (encrypted) on chip key (ECC, AES, SHA HMAC) and data storage
- Guaranteed Unique 72-bit Serial Number
- Boot validation
But that's not what people on this thread are asking for; they want it to do all the crypto stuff they do normally, with all the keys secured in hardware.
I'm a little out of my depth on this stuff; I've done chipset work but my part of those projects always starts with the C code. Maybe you can accomplish what you want with a cheap crypto IC. I'm really just pushing back on the idea that because you can build a smartphone out of a cheap ARM core, you can also build an HSM out of one.
You can put AES keys in the slots and have the IC perform operations with them.
> and you don't necessarily care if the whole package is secure against DPA, that part is a cheap way to get that.
Go get the NDA datasheet.
> (HSM out of ARM core alone)
We agree here.
Does the data sheet talk about hardware side channel mitigation?