Hardware
Embedded Security Modules (ESM)
Elliptic has introduced the Embedded Security Module which is defined as an IP core which contains a number of
cryptographic elements implemented behind a common AMBA interface. By coupling this
capability with a secret key and private AES context, Elliptic can offer a very high level of security for volume
applications such as cell phones, point of sale terminals, anti-counterfeiting and mobile music or video players. Elliptic now has
five embedded security modules:
The ESM-01 Embedded Security Module implements the DTCP digital rights management design. The ESM is easily extended to
support Microsoft DRM and OMA 2.0. Elliptic has also released its new DTCP middleware that includes the DTCP stack and a content protection
demonstration of streaming digital video. For more information please follow this link to the product page.
The ESM-02 Embedded Security Module implements
all of the symmetric and asymmetric cryptography
requirements for the new payment card industry
(PCI) standard. The MasterCard document outlining
the specification can be found through the
following link.
This standard is quite rigorous and requires
that the SoC incorporate security cores featuring
both power analysis resistance (differential
and simple analysis) and differential timing
analysis resistance. Elliptic uses proprietary
hardware technology to implement resistance
to these attacks. The core can also be used
for high security modules (HSMs), smart cards
and TPM designs.
The ESM-03 is designed to address the Personal
Multimedia Player (PMP) through a low gate
count solution that implements Windows DRM
for Mobile which is also known as PlaysForSure(TM).
The PMP market is divided into two dominant
technologies - the very successful Apple iPOD with
FairPlay DRM which has overall market leadership
and MP-3 players that support Windows DRM (WMA)
offered by a wide variety of manufacturers.
The ESM-03 is configured for Windows DRM support
but can easily be upgraded to support FairPlay
if required.
Customers developing SoCs for HDDVD, Blu-Ray
or HDTV must now support the high-definition,
multi-media interface (HDMI). For high definition
content, HDMI must implement the content protection
protocol HDCP (High-Bandwidth Digital Content
Protection) system. The ESM-04 combines a
high bandwidth HDCP cipher with Elliptic's
proprietary key wrap technology to avoid the
use of expensive, on-chip non-volatile memory
(NVM).
Manufacturers in networking, pharmaceuticals
and high end retail products are looking for
a low cost, anti-counterfeiting solution that
is cryptographically sound. The ESM-05 Anti-Counterfeiting
Embedded Security Module (ESM) is a low gate
count, low power identity module that incorporates
a unique 256 bit identifier specific to the
SoC. The unique identifier is bound to a RSA
private key during a user-controlled configuration
process to support a variety of identity provisioning
schemes. The RSA private key may only be exported
as a wrapped key blob using an internal NIST
AES key wrap function. Wrapping permanently
binds the RSA private key to the module that
created it.
|
