Datasheet

4

Revision 3.10

2020-09-24

OPTIGA™ Trust M

Error! Bookmark not defined.

ty name. MERGEFORMAT 2019

Introduction

e \* MERGEF2020-09-24

Error! Bookmark not defined.

property name.ry

1

Introduction

As embedded systems (e.g. IoT devices) are increasingly gaining the attention of attackers, Infineon offers the

OPTIGA™ Trust M as a turnkey security solution for industrial automation systems, smart homes, consumer

devices and medical devices. This high-end security controller comes with full system integration support for

easy and cost-effective deployment of high-end security for your assets.

1.1

Broad range of benefits

Integrated into your device, the OPTIGA™ Trust M supports protection of your brand and business case,

differentiates your product from your competitors, and adds value to your product, making it stronger against

cyberattacks.

1.2

Enhanced security

The OPTIGA™ Trust M is based on an advanced security controller with built-in tamper proof NVM for secure

storage and Symmetric/Asymmetric crypto engines to support ECC NIST curves up to P-521, ECC Brainpool

curve up to P-512, RSA® up to 2048, AES key up to 256, HMAC up to SHA512, HKDF up to SHA512 and SHA-256.

This new security technology greatly enhances your overall system security.

1.3

Fast and easy integration

The turnkey setup – with full system integration and all key/certificate material preprogrammed – reduces your

efforts for design, integration and deployment to a minimum. As a turnkey solution, the OPTIGA™ Trust M

comes with preprogrammed OS/Application code locked and with host-side modules to integrate with host

micro controller software. The temperature range of −40°C to +105°C combined with a standardized I2C

interface and the small PG-USON-10-2,-4 footprints will facilitate onboarding in your existing ecosystem.

Almost 30 years in a market-leading position with nearly 20 billion security controllers shipped worldwide are

the results of Infineon's strong expertise and its commitment to make security a success factor for you.

1.4

Applications

The OPTIGA™ Trust M covers a broad range of use cases necessary for many types of applications that include

the following:

a)

Network node protection using Mutual Authentication such as TLS or DTLS

b)

Protect the Authenticity, Integrity and Confidentiality of your product, data and IP

c)

Secure Communication

d)

Datastore Protection

e)

Lifecycle Management

f)

Platform Integrity Protection

g)

Secure Updates

1.5

Device Features

The OPTIGA™ Trust M comes with up to 10kB of user memory that can be used to store X.509 certificates and

data. OPTIGA™ Trust M is based on Common Criteria (CC) Certified EAL6+ (high) hardware enabling it to prevent

physical attacks on the device itself and providing high assurance that the keys or arbitrary data stored cannot

be accessed by an unauthorized entity. The CC certificate can be found at www.bsi.bund.de by searching for