SlideShare a Scribd company logo
gHSM
Product Introduction
What is gHSM Solution?
➢ gHSM is a HSM Firmware solution for IFX Aurix1G and Aurix2G MCUs.
➢ gHSM software running in trusted environment (AURIX HSM), providing:
⚫ HW accelerated* cryptographic services (Encryption/Decryption, Random Number Generation, Hash Signature
Generation/Verification)
⚫ Crypto Key Management (Key Generation, Key Derivation and Key Secured Storage)
⚫ Secure Boot to guarantee the integrity of controller’s software
⚫ Secure Debug
➢ gHSM can be integrated with AutoSar or Non-AutoSar basic software.
* For A1G TC23x, only “gHSM Standard” functions can be supported.
* HW accelerators for HASH and PKC algorithms are only available in Aurix2G family.
gHSM running environment - Infineon AURIX HSM
AURIX Hardware Security Module (HSM)
⚫ AES128 and TRNG implemented in HW
⚫ HASH & PKC Accelerator implemented in HW
(AURIX2G only)
⚫ Customer Specific requirements (e.g.
SM2/SM3/SM4, asymmetric Encryption) can
be implemend in Software
⚫ AES CMAC with minimum rate 25MBytes/s
(4MB in 160ms)
⚫ A highly flexible and programmable solution
⚫ Secure Key Storage provided by separated
HSM D/P-FLASH
gHSM Features Overview
Features Sub-Modes gHSM Standard gHSM Extended (on Road)
AES 128 cipher modes ECB ◆ ◆
CBC ◆ ◆
OFB ◆ ◆
CFB ◆ ◆
CTR ◆ ◆
XTS ◆ ◆
GCM ◆ ◆
AES 128 MAC CMAC ◆ ◆
Random Number Generator Pseudo ◆ ◆
True ◆ ◆
Non-Volatile user key slots 20 N
Ram Key slot 1 1
Key usage restriction for CMAC verification ◆ ◆
Safe CMAC Verification ◆ ◆
SHA (224, 256, 512) ◆
RSA/ECDSA/Ed25519 ◆
Secure Boot ◆ ◆
Secure Update ◆
gHSM Standard Features
2009-04-01 SHE Functional Specification v1.1
(rev439).pdf
➢ gHSM Standard provides features according to:
➢ 2009-04-01 SHE Functional Specification v1.1 (rev439).pdf
➢ 2009-10-16 Errata and amendments to SHE v1.1, rev439.pdf
Software Architecture Overview
➢ HSM Firmware & TRICORE Complex Driver
➢ AutoSar (ASR403_CRY) & Non-AutoSar Interface
* CSM is not a part of gHSM standard solution
gHSM Standard Interfaces
➢ CRY Interfaces are provided to use SHE standard features
gHSM Standard Feature – Secure Boot
➢ Is using symmetrical algorithm CMAC
➢ Is composed of:
⚫ A check started independently by SHE after reset
➢ The SHE-check is based on
⚫ a symmetrical key
⚫ an expected CMAC result value
both stored in SHE non-volatile memory.
➢ The SHE-check is only related to the initial application boot part
(called e.g. Startup, Initial bootloader, Boot manager)
➢ SHE secure boot provides user-accessible interfaces to inform SHE
about the authenticity of the subsequent software parts.
➢ Consequences if an application software is evaluated as non-
authentic: Some of the SHE keys (e.g. master key, user key) may no
more be usable until next reset.
➢ Note: SHE-check is only checking TriCore software, not HSM
software.
gHSM Standard Feature – Key Storage
➢ gHSM Standard provides SHE standard Key Storage (extended to support 20 Keys) and Update protocol
➢ Key are stored in HSM DFLASH sectors. (For TC23x, as not DF1 exists, PFLASH sectors are used to emulating DF1)
2021年03月01日
上海金脉电子科技有限公司
上海市浦东新区康桥路787号10号楼一层
THANKS!

More Related Content

Similar to gHSM Product Introduction 2022newdocumane.pdf

BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEEBKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
Linaro
 
TC and TPM.ppt
TC and TPM.pptTC and TPM.ppt
TC and TPM.ppt
yhaxpsos
 
The Best of Both Worlds: Agile Development and Fast Compliance
The Best of Both Worlds: Agile Development and Fast ComplianceThe Best of Both Worlds: Agile Development and Fast Compliance
The Best of Both Worlds: Agile Development and Fast Compliance
Perforce
 
Track 5 session 3 - st dev con 2016 - mechanisms for trusted code execution...
Track 5   session 3 - st dev con 2016 - mechanisms for trusted code execution...Track 5   session 3 - st dev con 2016 - mechanisms for trusted code execution...
Track 5 session 3 - st dev con 2016 - mechanisms for trusted code execution...
ST_World
 
Trusted Platform Module (TPM)
Trusted Platform Module (TPM)Trusted Platform Module (TPM)
Trusted Platform Module (TPM)
k33a
 
Trusted Computing security _platform.ppt
Trusted Computing security _platform.pptTrusted Computing security _platform.ppt
Trusted Computing security _platform.ppt
naghamallella
 
An overview of the samsung knox platform v1 14
An overview of the samsung knox platform v1 14An overview of the samsung knox platform v1 14
An overview of the samsung knox platform v1 14
Javier Gonzalez
 
GGM8000-FIPs-Certification
GGM8000-FIPs-CertificationGGM8000-FIPs-Certification
GGM8000-FIPs-Certification
David Kiefer
 
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Michelle Holley
 
Security Consideration for Set-top box SoC
Security Consideration for Set-top box SoCSecurity Consideration for Set-top box SoC
Security Consideration for Set-top box SoC
Wesley Li
 
BAS004-1_伺服器硬體基礎_v181026
BAS004-1_伺服器硬體基礎_v181026BAS004-1_伺服器硬體基礎_v181026
BAS004-1_伺服器硬體基礎_v181026
rwp99346
 
Getting Space Pirate Trainer* to Perform on Intel® Graphics
Getting Space Pirate Trainer* to Perform on Intel® GraphicsGetting Space Pirate Trainer* to Perform on Intel® Graphics
Getting Space Pirate Trainer* to Perform on Intel® Graphics
Intel® Software
 
LAS16-203: Platform security architecture for embedded devices
LAS16-203: Platform security architecture for embedded devicesLAS16-203: Platform security architecture for embedded devices
LAS16-203: Platform security architecture for embedded devices
Linaro
 
Windows 7 professional Vs Windows 7 enterprise
Windows 7 professional Vs Windows 7 enterpriseWindows 7 professional Vs Windows 7 enterprise
Windows 7 professional Vs Windows 7 enterprise
247infotech
 
The samsung knox platform 0
The samsung knox platform 0The samsung knox platform 0
The samsung knox platform 0
Javier Gonzalez
 
BAS004-1_伺服器硬體基礎_v181026 (View online)
BAS004-1_伺服器硬體基礎_v181026 (View online)BAS004-1_伺服器硬體基礎_v181026 (View online)
BAS004-1_伺服器硬體基礎_v181026 (View online)
rwp99346
 
Platform Security Summit 18: Xen Security Weather Report 2018
Platform Security Summit 18: Xen Security Weather Report 2018Platform Security Summit 18: Xen Security Weather Report 2018
Platform Security Summit 18: Xen Security Weather Report 2018
The Linux Foundation
 
TN104_Rutenberg_Sinai_090805
TN104_Rutenberg_Sinai_090805TN104_Rutenberg_Sinai_090805
TN104_Rutenberg_Sinai_090805
Orna Zadok Rutenberg
 
P2PE Solutions From Futurex
P2PE Solutions From FuturexP2PE Solutions From Futurex
P2PE Solutions From Futurex
Greg Stone
 
AMP Kynetics - ELC 2018 Portland
AMP  Kynetics - ELC 2018 PortlandAMP  Kynetics - ELC 2018 Portland
AMP Kynetics - ELC 2018 Portland
Kynetics
 

Similar to gHSM Product Introduction 2022newdocumane.pdf (20)

BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEEBKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
BKK16-110 A Gentle Introduction to Trusted Execution and OP-TEE
 
TC and TPM.ppt
TC and TPM.pptTC and TPM.ppt
TC and TPM.ppt
 
The Best of Both Worlds: Agile Development and Fast Compliance
The Best of Both Worlds: Agile Development and Fast ComplianceThe Best of Both Worlds: Agile Development and Fast Compliance
The Best of Both Worlds: Agile Development and Fast Compliance
 
Track 5 session 3 - st dev con 2016 - mechanisms for trusted code execution...
Track 5   session 3 - st dev con 2016 - mechanisms for trusted code execution...Track 5   session 3 - st dev con 2016 - mechanisms for trusted code execution...
Track 5 session 3 - st dev con 2016 - mechanisms for trusted code execution...
 
Trusted Platform Module (TPM)
Trusted Platform Module (TPM)Trusted Platform Module (TPM)
Trusted Platform Module (TPM)
 
Trusted Computing security _platform.ppt
Trusted Computing security _platform.pptTrusted Computing security _platform.ppt
Trusted Computing security _platform.ppt
 
An overview of the samsung knox platform v1 14
An overview of the samsung knox platform v1 14An overview of the samsung knox platform v1 14
An overview of the samsung knox platform v1 14
 
GGM8000-FIPs-Certification
GGM8000-FIPs-CertificationGGM8000-FIPs-Certification
GGM8000-FIPs-Certification
 
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
Intel® QuickAssist Technology Introduction, Applications, and Lab, Including ...
 
Security Consideration for Set-top box SoC
Security Consideration for Set-top box SoCSecurity Consideration for Set-top box SoC
Security Consideration for Set-top box SoC
 
BAS004-1_伺服器硬體基礎_v181026
BAS004-1_伺服器硬體基礎_v181026BAS004-1_伺服器硬體基礎_v181026
BAS004-1_伺服器硬體基礎_v181026
 
Getting Space Pirate Trainer* to Perform on Intel® Graphics
Getting Space Pirate Trainer* to Perform on Intel® GraphicsGetting Space Pirate Trainer* to Perform on Intel® Graphics
Getting Space Pirate Trainer* to Perform on Intel® Graphics
 
LAS16-203: Platform security architecture for embedded devices
LAS16-203: Platform security architecture for embedded devicesLAS16-203: Platform security architecture for embedded devices
LAS16-203: Platform security architecture for embedded devices
 
Windows 7 professional Vs Windows 7 enterprise
Windows 7 professional Vs Windows 7 enterpriseWindows 7 professional Vs Windows 7 enterprise
Windows 7 professional Vs Windows 7 enterprise
 
The samsung knox platform 0
The samsung knox platform 0The samsung knox platform 0
The samsung knox platform 0
 
BAS004-1_伺服器硬體基礎_v181026 (View online)
BAS004-1_伺服器硬體基礎_v181026 (View online)BAS004-1_伺服器硬體基礎_v181026 (View online)
BAS004-1_伺服器硬體基礎_v181026 (View online)
 
Platform Security Summit 18: Xen Security Weather Report 2018
Platform Security Summit 18: Xen Security Weather Report 2018Platform Security Summit 18: Xen Security Weather Report 2018
Platform Security Summit 18: Xen Security Weather Report 2018
 
TN104_Rutenberg_Sinai_090805
TN104_Rutenberg_Sinai_090805TN104_Rutenberg_Sinai_090805
TN104_Rutenberg_Sinai_090805
 
P2PE Solutions From Futurex
P2PE Solutions From FuturexP2PE Solutions From Futurex
P2PE Solutions From Futurex
 
AMP Kynetics - ELC 2018 Portland
AMP  Kynetics - ELC 2018 PortlandAMP  Kynetics - ELC 2018 Portland
AMP Kynetics - ELC 2018 Portland
 

Recently uploaded

Crain's Detroit Business - Today's Michigan business news
Crain's Detroit Business - Today's Michigan business newsCrain's Detroit Business - Today's Michigan business news
Crain's Detroit Business - Today's Michigan business news
babulkumar76508
 
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
dimplekumaridk322
 
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
gargruksana809
 
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
kimmi singla$A17
 
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
jealousviolet
 
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
jimmigarg6
 
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
dilbaagsingh0898
 
University of Western Sydney degree offer diploma Transcript
University of Western Sydney degree offer diploma TranscriptUniversity of Western Sydney degree offer diploma Transcript
University of Western Sydney degree offer diploma Transcript
hnugnoy
 
Accenture Song Design for Car Phygital.pdf
Accenture Song Design for Car Phygital.pdfAccenture Song Design for Car Phygital.pdf
Accenture Song Design for Car Phygital.pdf
SuryaKarthikeyan5
 
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in CityGirls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
kavitakumariok138
 
What Causes Audi Car Battery Failures Solutions and Maintenance Tips
What Causes Audi Car Battery Failures Solutions and Maintenance TipsWhat Causes Audi Car Battery Failures Solutions and Maintenance Tips
What Causes Audi Car Battery Failures Solutions and Maintenance Tips
Woodinville Sports Cars
 
Volvo SDLG LG918 Operation Maintenance Manual
Volvo SDLG LG918 Operation Maintenance ManualVolvo SDLG LG918 Operation Maintenance Manual
Volvo SDLG LG918 Operation Maintenance Manual
Excavator
 
Power Metering Market Global Trends and Forecast Analysis (2023-2032)
Power Metering Market Global Trends and Forecast Analysis (2023-2032)Power Metering Market Global Trends and Forecast Analysis (2023-2032)
Power Metering Market Global Trends and Forecast Analysis (2023-2032)
PriyanshiSingh187645
 
@call Hyderabad @Girls we provide Beautiful best and no1
@call Hyderabad @Girls we provide Beautiful best and no1@call Hyderabad @Girls we provide Beautiful best and no1
@call Hyderabad @Girls we provide Beautiful best and no1
babalakumar0099
 
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
avanikakapoor
 
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
sharonblush
 
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
solankikamal004
 
UiPath Automotive PPT explaining about auto AWS.pptx
UiPath Automotive PPT explaining about auto AWS.pptxUiPath Automotive PPT explaining about auto AWS.pptx
UiPath Automotive PPT explaining about auto AWS.pptx
kalolo8435
 
Flinders University degree offer diploma Transcript
Flinders University degree offer diploma TranscriptFlinders University degree offer diploma Transcript
Flinders University degree offer diploma Transcript
hnugnoy
 
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
gargshuriti
 

Recently uploaded (20)

Crain's Detroit Business - Today's Michigan business news
Crain's Detroit Business - Today's Michigan business newsCrain's Detroit Business - Today's Michigan business news
Crain's Detroit Business - Today's Michigan business news
 
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
High Profile Girls Call Agra 🎈🔥000XX00000 🔥💋🎈 Provide Best And Top Girl Servi...
 
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Shimla 000XX00000 Provide Best And Top Girl Service And No1 i...
 
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
Female Girls Call Delhi 🛵🚡9711199171 💃 Choose Best And Top Girl Service And N...
 
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
Exclusive Girls Call Mumbai 9910780858 Provide Best And Top Girl Service And ...
 
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
High Girls Call Mohali 000XX00000 Provide Best And Top Girl Service And No1 i...
 
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
Coimbatore Girls Call 000XX00000 Provide Best And Top Girl Service And No1 in...
 
University of Western Sydney degree offer diploma Transcript
University of Western Sydney degree offer diploma TranscriptUniversity of Western Sydney degree offer diploma Transcript
University of Western Sydney degree offer diploma Transcript
 
Accenture Song Design for Car Phygital.pdf
Accenture Song Design for Car Phygital.pdfAccenture Song Design for Car Phygital.pdf
Accenture Song Design for Car Phygital.pdf
 
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in CityGirls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
Girls Call Mumbai 9967584737 Provide Best And Top Girl Service And No1 in City
 
What Causes Audi Car Battery Failures Solutions and Maintenance Tips
What Causes Audi Car Battery Failures Solutions and Maintenance TipsWhat Causes Audi Car Battery Failures Solutions and Maintenance Tips
What Causes Audi Car Battery Failures Solutions and Maintenance Tips
 
Volvo SDLG LG918 Operation Maintenance Manual
Volvo SDLG LG918 Operation Maintenance ManualVolvo SDLG LG918 Operation Maintenance Manual
Volvo SDLG LG918 Operation Maintenance Manual
 
Power Metering Market Global Trends and Forecast Analysis (2023-2032)
Power Metering Market Global Trends and Forecast Analysis (2023-2032)Power Metering Market Global Trends and Forecast Analysis (2023-2032)
Power Metering Market Global Trends and Forecast Analysis (2023-2032)
 
@call Hyderabad @Girls we provide Beautiful best and no1
@call Hyderabad @Girls we provide Beautiful best and no1@call Hyderabad @Girls we provide Beautiful best and no1
@call Hyderabad @Girls we provide Beautiful best and no1
 
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
Independent Girls call Service Hyderabad 000XX00000 Provide Best And Top Girl...
 
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
New Girls Call Navi Mumbai 9930245274 Provide Best And Top Girl Service And N...
 
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
Girls Call Ahemdabad 000XX00000 Provide Best And Top Girl Service And No1 in ...
 
UiPath Automotive PPT explaining about auto AWS.pptx
UiPath Automotive PPT explaining about auto AWS.pptxUiPath Automotive PPT explaining about auto AWS.pptx
UiPath Automotive PPT explaining about auto AWS.pptx
 
Flinders University degree offer diploma Transcript
Flinders University degree offer diploma TranscriptFlinders University degree offer diploma Transcript
Flinders University degree offer diploma Transcript
 
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
VVIP Girls Call Guwahati 000XX00000 Provide Best And Top Girl Service And No1...
 

gHSM Product Introduction 2022newdocumane.pdf

  • 2. What is gHSM Solution? ➢ gHSM is a HSM Firmware solution for IFX Aurix1G and Aurix2G MCUs. ➢ gHSM software running in trusted environment (AURIX HSM), providing: ⚫ HW accelerated* cryptographic services (Encryption/Decryption, Random Number Generation, Hash Signature Generation/Verification) ⚫ Crypto Key Management (Key Generation, Key Derivation and Key Secured Storage) ⚫ Secure Boot to guarantee the integrity of controller’s software ⚫ Secure Debug ➢ gHSM can be integrated with AutoSar or Non-AutoSar basic software. * For A1G TC23x, only “gHSM Standard” functions can be supported. * HW accelerators for HASH and PKC algorithms are only available in Aurix2G family.
  • 3. gHSM running environment - Infineon AURIX HSM AURIX Hardware Security Module (HSM) ⚫ AES128 and TRNG implemented in HW ⚫ HASH & PKC Accelerator implemented in HW (AURIX2G only) ⚫ Customer Specific requirements (e.g. SM2/SM3/SM4, asymmetric Encryption) can be implemend in Software ⚫ AES CMAC with minimum rate 25MBytes/s (4MB in 160ms) ⚫ A highly flexible and programmable solution ⚫ Secure Key Storage provided by separated HSM D/P-FLASH
  • 4. gHSM Features Overview Features Sub-Modes gHSM Standard gHSM Extended (on Road) AES 128 cipher modes ECB ◆ ◆ CBC ◆ ◆ OFB ◆ ◆ CFB ◆ ◆ CTR ◆ ◆ XTS ◆ ◆ GCM ◆ ◆ AES 128 MAC CMAC ◆ ◆ Random Number Generator Pseudo ◆ ◆ True ◆ ◆ Non-Volatile user key slots 20 N Ram Key slot 1 1 Key usage restriction for CMAC verification ◆ ◆ Safe CMAC Verification ◆ ◆ SHA (224, 256, 512) ◆ RSA/ECDSA/Ed25519 ◆ Secure Boot ◆ ◆ Secure Update ◆
  • 5. gHSM Standard Features 2009-04-01 SHE Functional Specification v1.1 (rev439).pdf ➢ gHSM Standard provides features according to: ➢ 2009-04-01 SHE Functional Specification v1.1 (rev439).pdf ➢ 2009-10-16 Errata and amendments to SHE v1.1, rev439.pdf
  • 6. Software Architecture Overview ➢ HSM Firmware & TRICORE Complex Driver ➢ AutoSar (ASR403_CRY) & Non-AutoSar Interface * CSM is not a part of gHSM standard solution
  • 7. gHSM Standard Interfaces ➢ CRY Interfaces are provided to use SHE standard features
  • 8. gHSM Standard Feature – Secure Boot ➢ Is using symmetrical algorithm CMAC ➢ Is composed of: ⚫ A check started independently by SHE after reset ➢ The SHE-check is based on ⚫ a symmetrical key ⚫ an expected CMAC result value both stored in SHE non-volatile memory. ➢ The SHE-check is only related to the initial application boot part (called e.g. Startup, Initial bootloader, Boot manager) ➢ SHE secure boot provides user-accessible interfaces to inform SHE about the authenticity of the subsequent software parts. ➢ Consequences if an application software is evaluated as non- authentic: Some of the SHE keys (e.g. master key, user key) may no more be usable until next reset. ➢ Note: SHE-check is only checking TriCore software, not HSM software.
  • 9. gHSM Standard Feature – Key Storage ➢ gHSM Standard provides SHE standard Key Storage (extended to support 20 Keys) and Update protocol ➢ Key are stored in HSM DFLASH sectors. (For TC23x, as not DF1 exists, PFLASH sectors are used to emulating DF1)