User manual

Security Characteristics

4. Security Characteristics

4.1. Atmel® Secure Boot Solution

The SAMA5D3 Microcontrollers can be configured to run in standard boot mode or a

secure boot mode. In secure boot mode the Microcontroller only boots an image with

a correct cryptographic checksum. Information on how the secure boot mode can be

enabled, and how the chip operates in this mode is provided by Atmel ® only under a NDA.

Please contact the taskit support on how to obtain this.

4.2. Encryption Engine

The StampA5D3x have a DMA supported encryption engine for faster en- and decryption.

The Microcontrollers encryption engine is supported by a Linux driver and supports the

following encryption standards:

4.2.1. Advanced Encryption Standard (AES)

The Advanced Encryption Standard(AES) specifies a FIPS 197 approved symmetric

cryptographic algorithm that can be used to protect electronic data. It is a symmetric

block cipher that can encrypt and decrypt information.

The AES can use 128/192/256 bit cryptographic keys to encrypt and decrypt data in blocks

of 128 bits in 12/14/16 clock cycles.

4.2.2. Triple Data Encryption Standard (TDES)

The Triple Data Encryption Standard specifies a FIPS 46-3 approved symmetric

cryptographic algorithm that can be used to protect electronic data. It is a symmetric

block cipher that can encrypt and decrypt information. It supports DES and two-key and

three-key algorithms for TDES.

The TDES can use a 64 bit cryptographic key to encrypt and decrypt data in blocks of

8/16/32/64 bits in 18 (DES) or 50 (TDES) clock cycles.

4.2.3. Secure Hash Algorithm SHA

Cryptologic hash functions compute a distinct test value of digital data. They are the

base for computing digital signatures. If two messages have the same test value it should

guarantee that the messages are the same. The secure Hash Algorithm is compliant with

FIPS 180-2 specification.

SHA1, SHA224, SHA256, SHA384 and SHA512 algorithms are supported.

4.3. Serial Number

Every StampA5D3x has a unique 72-bit hardware serial number, which can be used by

application software. A Linux driver is provided.