The A5000 is a ready-to-use secure IoT authenticator. It provides a root of trust at the IC

level and it gives an IoT authentication system state-of-the-art security capability right out

of the box.

A5000 allows for securely storing and provisioning credentials and performing

cryptographic operations for security critical communication and authentication functions.

A5000 is versatile in IoT security use cases such as secure connection to public/private

clouds, device-to-device authentication or counterfeit protection

A5000 has an independent Common Criteria EAL 6+ security certification up to OS level

and supports ECC asymmetric cryptographic and AES/3DES symmetric algorithms. The

latest security measures protect the IC even against sophisticated non-invasive and

invasive attack scenarios.

The A5000 is a turnkey solution that comes with an authentication application optimized

for authentication security use cases pre-installed. This is complemented by an

authentication tailored product support package, enabling fast time to market & easy

design-in with Plug & Trust middleware for host applications, easy to use development

kits, reference designs, and documentation for product evaluation.

To implement inclusive language, the terms master/slave has been replaced by

controller/target, following the recommendation of MIPI.

2.1 Key benefits

• Plug & Trust for fast and easy design with dedicated product support package for

authentication use cases

• Easy integration with different MCU & MPU platforms and OSs (Linux, RTOS,

Windows, Android, etc.)

• Turnkey solution ideal for many authentication use cases without the need to write

security code

• Secure credential injection for proof of origin check

• Anti-counterfeit solution

• Secure, zero-touch connectivity to public & private clouds

• Real end-to-end security in authentication system from smart metering to smart home

appliances

• Ready-to-use example code for each of the key use cases such as device-to-device

authentication and originality check

2.2 Key features

The A5000 provides a secure and efficient protection for authentication and anticounterfeit

use cases. The efficiency of the security measures is proven by a Common

Criteria EAL6+ certification.

The A5000 operates fully autonomously based on an authenticaton software ready to

be used. The product comes with a dedicated authentication application. Direct memory

access is possible by the fixed functionalities of the NXP Authentication application only.

With that, the content from the memory is fully isolated from the host system.

• Built on NXP Integral Security Architecture 3.0 ™

• CC EAL 6+ certified HW and OS

• Effective protection against advanced attacks, including Power Analysis and Fault

Attacks of various kinds

• Multiple logical and physical protection layers, including metal shielding, end-to-end

encryption, memory encryption, tamper detection

• Support for ECC NIST asymmetric cryptography algorithms,

• Support for AES and DES symmetric cryptographic algorithms for encryption and

decryption

• Support for AES Modes: CBC, ECB,CTR,GCM,CCM

• HMAC, CMAC, GMAC, SHA-256/384 operations

• HKDF key derivation function

• Small and very thin footprint HX2QFN20 package (3 × 3 mm) with max 0.33 mm height

• Extended temperature range (-40 °C to +105 °C)

• Standard physical interface I2C Target (Fast mode, up to 1 Mbit/s)

• Secured user flash memory of 8kB for secure data or key storage

• Support for SCP03 protocol (bus encryption and encrypted credential injection) to

securely bind the host with the secure authenticator

• TRNG compliant to NIST SP800-90B

• DRBG compliant to NIST SP800-90A

• Support for Automatic detection of the I2C T=1 protocol implementation based on the

initial message prologue. Supported protocols:

– NXP SE05x T=1 Over I2C Specification. See [1].

– APDU Transport over SPI/I2C v1.0 | GPC_SPE_172. See [6].

• Matter Ready: A5000 provides the necessary cryptographic functions to support the

upcoming Matter standard for connecting smart home devices.