P5CC008V1A_P5CC012V1A_FAM_SDS

All information provided in this document is subject to legal disclaimers.

© NXP B.V. 2012. All rights reserved.

Product short data sheet

COMPANY PUBLIC

Rev. 3 — 22 August 2012

195430

3 of 15

NXP Semiconductors

P5CC008V1A and P5CC012V1A

Secure contact PKI smart card controller

1.6 Security features

SmartMX incorporates a wide range of both inherent and OS-controlled security features

as countermeasure against all types of attacks. NXP Semiconductors apply their

extensive knowledge of chip security, combined with handshaking circuit technology, very

dense 5-metal layer 0.14

m technology, glue logic and active shielding methodology for

optimum results in CC EAL5+, EMVCo and other third party certifications and approvals.

The SmartMX security features are acknowledged by most of the NXP Semiconductors

customers for their outstanding properties. The counter measures against light attacks are

regarded as “best-in-class”.

1.7 Security evaluation and certificates

Hardware security certification in accordance with CC EAL5+ is attained. Also, third-party

approval such as EMVCo (VISA, CAST), ZKA and others, depending on the application

requirements, are available.

NXP Semiconductors continues to drive forward third party security evaluations to provide

its customers with the relevant information and documentation needed to execute

subsequent composite evaluations of implemented applications.

1.8 Security licensing

In addition to the various intellectual properties regarding attack resistance of the NXP

Semiconductors’ owned SmartMX family, NXP Semiconductors has obtained a patent

license for SPA and DPA countermeasures from Cryptography Research Incorporated

(CRI). This license covers both hardware and software countermeasures. It is important to

customers that countermeasures within the operation system are covered under this

license agreement with CRI. Further details can be obtained on request.

1.9 Optional crypto library

NXP Semiconductors offer an optional crypto library for all family types:

– DES and Triple-DES encryption and decryption using the DES coprocessor

– RSA encryption and decryption, signature generation and verification for

straightforward and CRT keys up to 5024 bits

– RSA key generation

– ECC over GF(p) signature generation and verification (ECDSA) and Diffie-Hellman

key exchange for keys up to 544 bits

– ECC over GF(p) key generation

Diffie-Hellman key exchange for keys up to 544 bits

– SHA-1, SHA-224 and SHA-256 hash algorithm

– Pseudo-Random Number Generator (PRNG)