Trusted Secure IP Driver

Overview

This product enables secure updating of flash ROM embedded in MCUs and in preventing illicit firmware being booted up (secure booting). This driver controls AES, Triple-DES, RSA, ECC, SHA and MD5 algorithms and the generation of random numbers through high-speed hardware calculation by the Trusted Secure IP modules. As a result, this driver can help you to protect "Internet-of-Things" (IoT) embedded devices from viral infections and eavesdropping. Trusted Secure IP includes a full-function version "TSIP" and limited function version "TSIP-Lite".

Release Information

Note

1. Some MCUs in the listed groups do not include a TSIP module. Refer to the User's Manual: Hardware for the given group to check the type names of the MCUs that have a TSIP module.
2. Please use the binary version when considering the prototype. In this case, please download.
   Please use the source code version when considering the mass production. In this case, please contact us. Users cannot change cryptographic functions.

Operating Environment

Features

• Cryptographic functions which provide advanced security can be embedded in mass-produced products at low cost
• High-speed execution of the AES, a world standard cryptographic algorithm
• Support for AES-GCM, which is frequently included in the required specifications of smart meters
• Functions for safely updating firmware
• Easily combined with other device drivers for RX, RE MCUs or RZ MPUs

Components

• Trusted Secure IP Driver main body
• Trusted Secure IP Driver manual
• Sample code demonstrating application of the Trusted Secure IP Driver
  1. Sample code for confirming the way user keys are written
  2. Sample code for confirming the secure updating of firmware from USB memory or UART.

Functions

 Available | — Unavailable

Maximum key length for each algorithm.

• - AES: 256 bit
• - RSA: 2048 bit
• - DES: 56 bit
• - Triple-DES: 168 bit
• - ARC4: 2048 bit
• - DH: 2048 bit
• - ECDH: 512 bit
• - ECDSA: 256 bit
• - DSA 2048 bit / ECDSA 512 bit (Cryptographic algorithm for authentication): Not supported

Operating Environment

Note: This board is required to check the operation of sample code for checking the secure updating of firmware via wireless LAN.

Purpose

• Cryptographic communications among CPUs in equipment at sites or within equipment
• Secure updating of firmware for embedded devices in general

Obtaining the product

We will provide the product to customers who will be adopting or plan to adopt a Renesas microcontroller. Please contact your local Renesas Electronics sales office or distributor.