2 Features and benefits

2.1 Key benefits

• Plug & Trust for fast and easy design with complete product support package

• Updatability for feature upgrades and security maintenance in the field

• Easy integration with different MCU & MPU platforms and OSs (Linux, RTOS, Windows, Android, etc.)

• Turnkey solution ideal for system-level security without the need to write security code

• Secure credential injection for root of trust at IC level

• Secure, zero-touch connectivity to public & private clouds

• Real end-to-end security, from sensor to cloud

• Ready-to-use example code for each of the key use cases

2.2 Key features

The SE051 is based on NXP's Integral Security Architecture 3.0 providing a secure and efficient protection

against various security threats. The efficiency of the security measures is proven by a Common Criteria EAL6+

certification.

Dependent on the ordered product configuration the feature set can vary. For more information, see [4]. Within

this document the superset is described.

• SE051A/C includes pre-installed IoT applet for fast deployment

• SE051P supports proprietary applet development for custom products

• SE051W for secure UWB ranging comes with related applets and the IoT applet pre-installed

• SE051H for Matter comes with an extended IoT applet and T4T applet pre-installed

The SE051 operates fully autonomously based on an integrated Javacard operating system and applets. Direct

memory access is possible by the fixed functionalities of the NXP IoT applet only. With that, the content from the

memory is fully isolated from the host system.

• Built on NXP Integral Security Architecture 3.0

• CC EAL 6+ certified HW and OS as environment to run NXP IoT applications, supporting fully encrypted

communications and secured lifecycle management

• Suitable for industrial IoT use cases with IEC62443-4-2 certified for the applicable requirements and product

development lifecycle is compliant to IEC62443-4-1 certified secure process with maturity level 3

• Effective protection against advanced attacks, including Power Analysis and Fault Attacks of various kinds

• Multiple logical and physical protection layers, including metal shielding, end-to-end encryption, memory

encryption, tamper detection

• Applet updatability feature for multicast applet updates or upgrades and additional applet loading in the field

(see [8])

• Support for secure UWB ranging in combination with Trimension products (FIRA compliant)

• Matter Ready: SE051 provides the necessary cryptographic functions to support the upcoming Matter

standard for connecting smart home devices.

• Support for RSA and ECC asymmetric cryptography algorithms, future proof curves and high key length, e.g.

Brainpool, Edwards and Montgomery curves

• Support for AES and DES symmetric cryptographic algorithms for encryption and decryption

• Support for AES Modes:CBC, EBC, CTR, GCM, CCM

• HMAC, CMAC, GMAC, SHA-1, SHA-224/256/384/512 operations

• Various options for key derivation functions, including HKDF, MIFARE KDF, PRF (TLS-PSK)

• Optional extended temperature range for industrial applications (-40 °C to 105 °C)

• SPAKE2+ Password Authenticated Key Exchange algorithm

• Small footprint HX2QFN20 package (3 mm x 3 mm)

• Standard physical interface I2C target (High-speed mode, 3.4 Mbit/s), I2C controller (Fast mode, 400 kbit/s).

Both can be active at the same time

• Dedicated ISO14443-A passive contactless wireless interface for IoT use cases simplifying configuration setup,

maintenance in the field and late stage configuration

• Secured user flash memory ranging from 45 kB full featured up to 101 kB for secure data or key storage

• Support for SCP03 protocol (bus encryption and encrypted credential injection) to securely bind the host with

the secure element

• TRNG compliant to NIST SP800-90B

• DRBG compliant to NIST SP800-90A

• Support for applet level secure messaging channels to allow end-to-end encrypted communication in multitenant

ecosystems

• Support for automatic detection of the I2C T=1 protocol implementation based on the initial message prologue.

Supported protocols:

– NXP SE05x T=1 Over I2C Specification. See [1].

– APDU Transport over SPI/I2C v1.0 | GPC_SPE_172. See [6].

• SESIP Level 3 (with Applet version 6.x.x) certified with full physical attack resistance for the NXP IoT

applications and secure lifecycle management