STM32U5A5QJ datasheet(79/382 Pages) STMICROELECTRONICS

79 / 382 page

DS13543 Rev 1

79/382

STM32U5Axxx

Functional overview

channel attacks. The SAES can share its current key register information with the faster

AES using a dedicated hardware bus.

The SAES and the AES can be used to both encrypt and decrypt data using the AES

algorithm. It is a fully compliant implementation of the advanced encryption standard (AES)

as defined by Federal Information Processing Standards Publication (FIPS PUB 197,

Nov 2001).

Multiple chaining modes are supported for key sizes of 128 or 256 bits. ECB and CBC

chaining is supported by both SAES and AES, while CTR, CCM, GCM and GMAC chaining

is only supported by the AES.

SAES and AES support DMA single transfers for incoming and outgoing data (two DMA

channels required).

The SAES supports the selection of all the following key sources, while the AES support

only the first:

•

256-bit software key, written by the application in the key registers (write only)

•

256-bit derived hardware unique key (DHUK), computed inside the SAES engine from

a non-volatile OTP based root hardware unique key (RHUK)

•

256-bit boot hardware key (BHK), stored in tamper-resistant secure backup registers,

written by a secure code during boot. Once written, this key cannot be read or write by

any application until the next product reset.

•

XOR of DHUK (provisioned chip secret) and BHK (software secret)

DHUK, BHK and their XOR are not visible by any software (even secure).

Note:

128-bit key size can also be selected.

BHK key is cleared in case of tamper or RDP regression.

When the SAES is secure (respectively nonsecure), DHUK secure (respectively nonsecure)

is used.

The SAES peripheral is connected by hardware to the true random number generator RNG

(for side-channel resistance).

The SAES and AES peripherals support:

•

Compliant implementation of standard NIST Special Publication 197, Advanced

Encryption Standard (AES) and Special Publication 800-38A, Recommendation for

Block Cipher Modes of Operation

•

128-bit data block processing

•

Support for cipher keys length of 128-bit and 256-bit

•

Encryption and decryption with multiple chaining modes:

–

Electronic codebook (ECB) mode

–

Cipher block chaining (CBC) mode

•

Additional chaining modes supported by AES only:

–

Counter (CTR) mode

–

Galois counter mode (GCM)

–

Galois message authentication code (GMAC) mode

–

Counter with CBC-MAC (CCM) mode

•

528 or 743 clock cycle latency in ECB encryption mode for SAES processing one

128-bit block of data with, respectively, 128-bit or 256-bit key

STM32U5A5QJ Datasheet(PDF) 79 Page - STMicroelectronics

STM32U5A5QJ Datasheet(HTML) 79 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL