sematicon se.SAM™ P210 miniPCIe Cryptomodules – Keys in Hardware for the Industry

The se.SAM™ P210 CryptomodulesThe se.SAM™ P210 Module is module for the miniPCIe Slot. It uses the USB-Pins of the slot. The MiniPCIe interface is found in many industrial PCs and controllers and allows the crypto module to be screwed in securely. Functionally identical and equipped with the same processor as the U210 series, the device can be used for a variety of applications in which a trust anchor is required. This device also registers as a CDC device in the operating system and can be addressed via simple commands. In addition to a variety of algorithms such as NIST, Brainpool and RSA ranular permissions can be assigned to key objects. There is full support for “Secure Manufacturing”, which the device can fully exploit together with an N-Series module. The hardware of the cryptoprocessor as well as its operating system are CC-EAL6+ certified.

The se.SAM™ P210 – simple, universal with extended features and cryptofunctions

• Suitable and tested for industry, IT and office operation
• Long-term availability
• Extreme temperature ranges -40°C to +90°C
• Driverless – “Plug & Play“ – Independent of OS or CPU-Architectures
• No libraries or special software necessary
• Isolated storage areas for protecting cryptographic keys and data
• Cost-efficient integration by short training periods
• Integrated PIN-Management

Technical specifications

Cryptography

• Key storage: 10 symmetric keys and 10 asymmetric key pairs with certificate
• Symmetric algorithms: AES CBC, AES, CTR, AES ECB each with 128 and 256 bit, SHA1-HMAC, SHA256-HMAC, SHA384-HMAC, SHA512-HMAC, CMAC-128
• Asymmetric algorithms: RSA 512 to 4096, ECC-NIST-P/secp192r1 to 521r1, ECC-Brainpool 160 to 512, ECC Koblitz/secp160k1 to 256k1, ECDSA , ECDH
• HASH digest: SHA1, SHA-2-224 to 512
• Key derivation function: HKDF
• Additional functions: Secure Hardware-Counter, “Multi Source True Random Number Generator“, Key-ACLs, Secure Key Exchange, firmware update, which can be disabled, cryptographic self-test, Secure Key Import, Key Usage Counter, integrated precise real-time clock for automatic key management

Certifications

• Common Criteria EAL6+ (hardware and operating system of the crypto-processor)
• Compliant to EU-directive 2014/32/EU and the WELMEC Software Guide for Measuring Instruments (V7.2, 2015)

Connection

• Full-Size PCI Express Mini Card (USB-Pins)

Module features

• Size (LxWxH): 50,95 x 30 x 6,3 mm
• Weight: up to 35g
• Temperature range: -40°C to +85°C
• Humidity rating: 0% – 100% (without condensation)
• Data memory retention: over 15 years
• Immunity (ESD): 4 kV contacted discharge (Performance Criteria A), 8 kV air discharge (Performance Criteria A), EN55024:2010, EN61000-6-2:2005
• Immunity (EMI): 10V/m from 80 MHz to 1 GHz (Performance Criteria A), 3V/m from 1GHz to 2,7 GHz (Performance Criteria A), EN55024:2010, EN61000-6-2:2005
• Emission (EMR): EN55032:2012
• Accuracy of time: ±1 ppm @ 25°C
• Voltage: 3,3 V (DC)
• Power supply: up to 25 mA (under load)
• EU-directives (CE marking): 2012/19/EU (WEEE), 2011/65/EU and 2015(863/EU /RoHS), 2014/30/EU (EMC)