STSAFE-J100  

The STSAFE-J100 is a highly secure solution based on an Arm^®1 SecurCore^® SC000™ 32-bit RISC core. It acts as a secure element by providing authentication, data management and cryptographic services to a local or remote host.

The device embeds a secure Java Card operating system (3.0.4) compliant with GlobalPlatform (VGP 2.1.1 Configuration 2). It is ported on the latest generation of secure microcontrollers.

Combined with specific applications, the STSAFE-J100 addresses a very wide range of use cases. It can for instance be used for IoT (Internet of Things) devices, utilities, industrial applications and consumer electronics devices.

ST provides a complete set of tools for the integration of the security module:

Key Features

• ECC support for NIST-P-256 and other curves are supported depending on the product
• Digital signature generation and verification with ECDSA
• Key agreement with Diffie-Hellman (ECKA-ECDH) and El Gamal (ECKA-EG)
• ECDH-GM primitive for PACE protocol
• On-chip RSA and ECC key pair generation
• Key pair, public key and PIN objects
• Up to 88.6 Kbytes of user memory
• Extended-length APDUs
• In-house personalization services
• Full ecosystem with expansion board and middleware
• Supports specific application loading
• Different ST applets available for preloading
• Platform
  • Java Card™ 3.0.4 Classic Edition
  • GlobalPlatform^® 2.1.1
  • GlobalPlatform 2.2 - Amendment D - SCP03
  • ISO/IEC 7816 T=0 and T=1 contact protocols
  • Standard I2C communication up to 100 kHz
• Hardware
  • Arm^® SecurCore^® SC000™ 32-bit RISC core
    • 30-year data retention at 25 °C
    • 500 000 erase/write cycles at 25 °C
  • Operating temperature: –40 to +85 °C
  • Enhanced NESCRYPT cryptoprocessor for public key cryptography
  • Contact assignment compatible with ISO/IEC 7816-3 standards
  • Asynchronous receiver transmitter (IART) for high speed serial data support (ISO/IEC 7816-3 and EMV^® compliant)
  • ESD protection greater than 6 kV (HBM) for contact pads
  • 1.62 V to 5.5 V supply voltages
  • ECOPACK^® 32-lead VFQFPN 5×5 mm (0.5 mm pitch)
• Security
  • AIS-31 class PTG.2 compliant true random number generator (TRNG)
  • AIS-20/31 class DRG.3 deterministic number generator (DRNG)
  • Enhanced cryptographic algorithms:
    • DES/3DES, ECC and AES
    • SHA-1, SHA224, SHA-256, SHA384, SHA512, MD5 and CRC16
    • Generic Mapping primitive for Password Authenticated Connection Establishment (PACE) protocol
  • Hardware security DES accelerator
  • Hardware security AES
  • Differential power analysis (DPA) and differential fault analysis (DFA) countermeasures against side-channel attacks
  • Active shield
  • Unique serial number on each die
• Certifications
  • Hardware IC Common Criteria certified EAL5+
    • Certificate ANSSI-CC-2015/59 with maintenance report ANSSI-CC-2015/59-M01
  • Java Card Platform Common Criteria certification EAL5+ (AVA_VAN.5, ALC_DVS.2)
    • Reference PP: Java Card Closed Configuration Protection Profile, v3.0
    • Certificate ANSSI-CC-2017/23