We detect you are using an unsupported browser. For the best experience, please visit the site using Chrome, Firefox, Safari, or Edge. X

Establish System Trust Chain with Platform Root of Trust CEC17xx MCUs


With the rapid expansion of connected products, developers of data center, 5G, communication, networking and industrial equipment are seeking new ways to ensure that hardware, firmware and operating systems remain secure and uncompromised. Security threats are increasing exponentially in terms of frequency, targeted devices, malignancy and costs of attacks. In today's vast interconnected world, the need to provide greater security within a product or system is becoming a standard requirement.

You must design robust, connected and secure systems to stay one step ahead of criminal attacks and prevent theft of software, hardware, intellectual property and data and communications services.

Our CEC 32-bit platform root of trust microcontrollers (MCUs), which include the CEC173x, CEC1712 and CEC1702 MCUs, enable advanced root of trust hardware security, an immutable identity and real-time security to ensure that both the hardware and firmware in the systems are authentic. You can use these devices as companion security MCUs while also providing easy-to-use firmware authentication, real-time bus protection, device attestation, public key and customer-specific pre-provisioning flexibility to minimize your risk.

Explore Our Products


32-bit CEC 1712 Microcontroller

CEC173x

  • Real-time SPI bus monitoring
  • CNSA secure boot and secure update
  • Device attestaion
  • Physically Unclonable Function (PUF)
  • Complies with NIST 800-193 PFR and OCP security guidelines 
32-bit CEC 1302 Microcontroller

CEC1712

  • CNSA secure boot and secure update
  • Key revocation and code rollback protection
  • Complies with NIST 800-193 PFR and OCP security guidelines

Soteria Custom Firmware


  • NIST 800-193 PFR compliance firmware designed for CEC173x, CEC1712 and CEC1702
  • Modular and fully customizable
  • Minimal code changes to existing platform

The Soteria firmware is designed to enable Root of Trust security features with the CEC17xx microcontrollers (MCUs). It can be used in conjunction with any application processor (AP) that boots out of an external SPI flash device to extend the Root of Trust and enforce a secure boot and real-time system bus protection in the system.

The Soteria firmware provides a platform firmware resiliency solution that meets the NIST SP 800-193 guidelines. It uses the CEC17xx microcontrollers' immutable secure bootloader implemented in CEC17xx ROM, as the system Root of Trust (RoT). The CEC17xx microcontrollers' secure bootloader loads, decrypts and authenticates the firmware from the external SPI Flash. The validated firmware that runs on the CEC17xx microcontrollers is designed to authenticate the application processor firmware in the same SPI Flash. 

Once the system is securely booted up, the Soteria firmware provides real-time SPI, I2C and SMBus protection against unauthorized accesses or commands on those system busses. 

The Soteria firmware also supports secure firmware updates, SPDM for device attestation, key revocation, code rollback protection and other advanced security features.

Root of Trust Security Capabilities


The CEC17xx microcontrollers (MCUs) provide a variety of root of trust features and benefits to meet your trust chain needs.

Advanced Hardware Cryptographic Cipher Suite


The cryptographic algorithms that are supported are AES256, SHA-512, RSA-4096, SHA-512, ECC with key size up to 571 bits, ECDSA with a 384-bit key length, Curve25519, Ed25519, True Random Number Generator.

Crypto Parametrics CEC173x CEC1712 CEC1702
Symmetric Encryption AES128, AES192 and AES256
Modes: ECB, CBC, OFB, CFB, CTR
Hashing SHA-2: SHA-256, SHA-384, SHA-512 SHA-1, SHA-256, SHA-384, SHA-512
Public Key Engine (PKE) RSA RSA-1024 to RSA-4096
ECC 192 to 521 bits in GF(p)
160 to 571 bits in GF(2m)
Curve25519
DSA ECDSA, EC-KCDSA, Ed25519
Other Miller-Rabin Primality Testing, Modular Arithmetic Primitives
Random Number Generator True RNG (SP800-90B) True RNG
  1K FIFO for pre-calculation
Monotonic Counter Yes
User Programmable OTP 8 Kbits 4 Kbits 2.5 Kbits
Field Programmable Yes No
Memory Protection Unit Yes
Secure Boot
Integrity SHA-512 SHA-384 SHA-256
Authentication ECDSA-P384 ECSA-P256
Encryption (optional) ECDH-P384/AES-256 ECDH-P256/AES-256
Attestation
DICE In ROM In Firmware/Application
UDI Factory Provisioned (optional)

Development Tools


CEC1736 Development Board

Part Number: EV19K07A

The CEC1736 development board is an evaluation board that you can use for development, customer evaluation and demos. The CEC1736 Trust Shield solution acts as an external root of trust for data center, telecom/5G, embedded computing, networking and industrial platforms. The board comes with an optionally pre-provisioned CEC1736 MCU that partners with a Graphical User Interface (GUI) to demo the part's Real-Time Root of Trust features. 

CEC1x02 Development Board

Part Number: DM990013

This development board is designed for development and evaluation of the CEC1712 and CEC1702 MCUs. This board comes with a CEC1702 PIM. If you wish to evaluate the CEC1712, you can purchase the CEC1712 PIM separately. 

CEC1712H-S2 Plug-in-Module (PIM)

Part Number: MA990002

This CEC1712 PIM can be used in conjunction with the CEC1x02 Development Board.

Documentation


Title
Security Products - Glossary of Terms
Download
Soteria G3 Sell Sheet Download
Title
CEC173x Real Time Platform Root of Trust Controllers - Product Brief Download
CEC1712 Cryptographic Embedded Controller - Data Sheet Download
Title
Requesting NDA Documentation Download
AN4691 - Getting Started with MCC and Soteria-G3 Download
CEC1736 Development Board User’s Guide Download
CEC1x02 Development Board User's Guide Download
Title
Trust Platform GUI V2 installer for windows 10 x64 Download