Key features

The SE050 is based on NXP's Integral Security Architecture 3.0™ providing a secure

and efficient protection against various security threats. The efficiency of the security

measures is proven by a Common Criteria EAL6+ certification.

The SE050 operates fully autonomously based on an integrated Javacard operating

system and applet. Direct memory access is possible by the fixed functionalities of the

applet only. With that, the content from the memory is fully isolated from the host system.

• Built on NXP Integral Security Architecture 3.0 ™

• CC EAL 6+ certified HW and OS as environment to run NXP IoT applications,

supporting fully encrypted communications and secured lifecycle management

• FIPS 140-2 certified platform with Security Level 3 for OS and Applet, and Security

Level 4 related to Physical Security of the HW

– Disclaimer: FIPS certification require a specific product type. For more information,

refer to [4].

• Effective protection against advanced attacks, including Power Analysis and Fault

Attacks of various kinds

• Multiple logical and physical protection layers, including metal shielding, end-to-end

encryption, memory encryption, tamper detection

• Support for RSA and ECC asymmetric cryptography algorithms, future proof curves

and high key length, e.g. Brainpool, Edwards and Montgomery curves

• Support for AES and DES symmetric cryptographic algorithms for encryption and

decryption

• Support for AES Modes: CBC, ECB, CTR

• HMAC, CMAC, SHA-1, SHA-224/256/384/512 operations

• Various options for key derivation functions, including HKDF, MIFARE KDF, PRF (TLSPSK)

• Extended temperature range for industrial applications (-40 °C to +105 °C)

• Small footprint HX2QFN20 package (3x3 mm)

• Standard physical interface I2C target (High-speed mode, 3.4 Mbps), I2C controller

(Fast mode, 400 kbps). Both can be active at the same time

• Dedicated CL wireless interface for IoT use cases simplifying configuration set-up,

maintenance in the field and late stage configuration

• Secured user flash memory up to 50 kB for secure data or key storage

• Support for SCP03 protocol (bus encryption and encrypted credential injection) to

securely bind the host with the secure element

• TRNG compliant to NIST SP800-90B

• DRBG compliant to NIST SP800-90A

• Support for applet level secure messaging channels to allow end-to-end encrypted

communication in multi-tenant ecosystems

• In 2022 NXP launched a new generation of product variants, the SE050E platform. The

SE050E platform supports the following new features.

– AES Modes: CCM and GCM

– GMAC

– EC Curves for ECDH: Curve448

• Matter Ready: SE050 provides the necessary cryptographic functions to support the

upcoming Matter standard for connecting smart home devices.