security & chip card ics sle 66cx320p 16-bit security controller with memory management unit in 0.25 m cmos technology 64 kbyte rom, 3 kbytes ram, 32 kbyte eeprom 1100-bit advanced crypto engine and 64-bit des accelerator preliminary short product information 07.99
sle 66cx320p preliminary short product information this document contains preliminary information on a new product under development. details are subject to change without notice. revision history: current version 07.99 previous releases: page subjects (changes since last revision) important : further information is confidential and on request. please contact: infineon technologies ag in munich, germany, security & chip card ics, fax +49 89 234-28925 published by infineon technologies ag i.gr., cc system engineering group st.-martin-strasse, d-81541 mnchen ? infineon technologies ag i.gr. 1999 all rights reserved. attention please! the information herein is given to describe certain components and shall not be considered as warranted characteristics. terms of delivery and rights to technical change reserved. we hereby disclaim any and all warranties, including but not limited to warranties of non-infringement, regarding circuits, descriptions and charts stated herein. infineon technologies is an approved cecc manufacturer. information for further information on technology, delivery terms and conditions and prices please contact your nearest infineon technologies office in germany or our infineon technologies representatives world-wide (see address list). warnings due to technical requirements components may contain dangerous substances. for information on the types in question please contact your nearest infineon technologies office. infineon technologies components may only be used in life-support devices or systems with the express written approval of infineon technologies, if a failure of such components can reasonably be expected to cause the failure of that life-support device or system, or to affect the safety or effectiveness of that device or system. life support devices or systems are intended to be implanted in the human body, or to support and/or maintain and sustain and/or protect human life. if they fail, it is reasonable to assume that the health of the user or other persons may be endangered.
sle 66cx320p preliminary short product information 3 / 7 07.99 16-bit security controller with mmu in 0.25m cmos technologie 64 kbyte rom, 3 kbytes ram, 32 kbyte eeprom, 1100-bit advanced crypto engine and 64-bit des accelerator features 16-bit microcomputer in 0.25 m cmos technology instruction set opcode compatible with standard sab 8051 processor enhanced 16-bit arithmetic additional powerful instructions optimized for chip card applications dedicated, non-standard architecture with execution time six times faster than standard sab 8051 processor at same clock 63 kbytes user rom for application programs 1 kbyte reserved rom for resource management system (rms) with intelligent eeprom write/erase routines 32 kbytes eeprom 2 kbyte xram, 256 bytes iram, 700 bytes crypto ram memory management unit des and ec2 accelerator (gf 2 n ) advanced crypto engine crc module interrupt module pll 16-bit autoreload timer power saving sleep mode ext. clock freq. 1 to 7.5 mhz for int. clock 15 mhz uart for handling serial interface in accordance with iso 7816 supporting transmission protocols t=1 and t=0 i/o routines realized in software executable supply voltage range: 2.7 v to 5.5 v current consumption < 10 ma at 15 mhz internal and 5.5 v temperature range: -25 to +70c esd protection larger than 4 kv eeprom reading, erasing and writing byte by byte flexible page mode for 1 to 64 bytes write/erase operation 32 bytes security area write time < 4.5 ms programming time independent of clock frequency minimum of 700.000 write/erase cycles at 25c data retention for a minimum of 10 years eeprom programming voltage generated on chip mmu addressable memory up to 1 mbyte separates os (system) and application (user) system routines called by traps os can restrict access to peripherals in application mode code execution from xram possible security features low and high voltage sensors low-frequency sensor high-frequency filter true random number generator internal power-on-reset 16 bytes security prom, hardware protected unique chip identification number for each chip security optimized layout additional security features support hw-& sw-tools (emulator, rom monitor, card emulator, simulator) application notes
sle 66cx320p preliminary short product information 4 / 7 07.99 features ( contd) performance advanced crypto engine operation modulus exponent calculation time at 5 mhz calcul. time at 15 mhz modular exponentiation 160 bit 160 bit 20 ms 7 ms modular exponentiation 256 bit 256 bit 35 ms 12 ms modular exponentiation 512 bit 512 bit 110 ms 37 ms modular exponentiation rsa encrypt / rsa signature verify 1024 bit 16 bit 20 ms 7 ms modular exponentiation rsa decrypt / rsa signature generate 1024 bit 1024 bit 820 ms 273 ms modular exponentiation using crt rsa decrypt / rsa signature generate eq.1024 bit eq.1024 bit 250 ms 83 ms dsa signature generate 512 bit 160 bit 145 ms 48 ms dsa signature verify 512 bit 160 bit 130 ms 43 ms dsa signature generate 1024 bit 160 bit 290 ms 97 ms dsa signature verify 1024 bit 160 bit 360 ms 120 ms elliptic curves ec-gdsa sign. generate 160 bit 160 bit 260 ms 87 ms elliptic curves ec-gdsa sign. verify. 160 bit 160 bit 550 ms 183 ms performance des accelerator encryption time for an 8 byte block incl. key loading + data transfer operation data block length no. of clock cycles to en-/ decrypt an 8 byte block 5 mhz 15 mhz 56-bit single des encryption 64 bit 32 20 s 7 s 112-bit triple des encryption 64 bit 98 37 s 12 s
sle 66cx320p preliminary short product information 5 / 7 07.99 ordering information type package 1 voltage range temperature range frequency range (ext. clock frequency) sle 66cx320p m4 m4 sle 66cx320p c c 2.7 v - 5.5 v C 25c to + 70c 1 mhz - 5 mhz sle 66cx320p-t85 m4 m4 sle 66cx320p-t85 c c 2.7 v - 5.5 v C 25c to + 85c 1 mhz - 5 mhz sle 66cx320p-f7 m4 m4 sle 66cx320p-f7 c c 2.7 v - 5.5 v C 25c to + 70c 1 mhz C 7.5 mhz pin configuration sle 66cx320p vdd gnd clk rs t i/ o figure 1 pin configuration pin definitions and functions symbol function vcc operating voltage rst reset input clk processor clock input gnd ground i/o bi-directional data port 1 available as wire-bonded module (m4) for embedding in plastic cards or as die (c) for customer packaging
sle 66cx320p preliminary short product information 6 / 7 07.99 general description sle 66cx320p is the first product of infineon technologies high end security controller family in advanced 0.25 m cmos technology. the cpu provides the high efficiency of the sab 8051 instruction set extended by additional powerful instructions together with enhanced performance, memory sizes and security features. the internal clock frequency can be adjusted up to 15 mhz independent of the clock rate of the terminal with the help of the pll. the controller ic offers 63 kbyte of user-rom, 256 bytes internal ram, 2048 bytes xram and 32 kbytes eeprom. the memory management unit allows a secure separation of the operating system and the applications. furthermore the mmu makes a secure downloading of applications possible after the personalization of a card. these new features suit the requirements of the next generation of multi application operating systems. for code compatibility to the sle 66cxxs family, a transparent mode for the mmu is established which allows to keep the memory mapping of the sle 66cxxs products. rom 64 kbyte sleep mode logic & sensors/filters: voltage clock reset pll eeprom 32 kbyte 16-bit timer des accelerator voltage regulator addre ss/d ata bus 16-bit cpu with mmu & eco 2000 instruction set random number generator xram 2 kbyte advanced crypto engine crc uart figure 2 block diagram sle 66cx320p the crc module allows the easy generation of checksums according to iso 3309 (16-bit-crc). to minimize the overall power consumption, the chip card controller ic offers a sleep mode. the uart supports the half-duplex transmission protocols t=0 and t=1 according to iso 7816-3. all relevant transmission parameters can be adjusted by software, as e.g. the clock division factor, direct/inverse convention and the number of stop bits. additionally, the i/o port can be driven by communication routines realized in software. the advanced crypto engine is equipped with its own ram of 700 bytes and supports all of today known public-key algorithms based on large integer modular arithmetic. it allows fast and efficient calculation of e.g. rsa operations with key lengths up to 2048 bit. the des accelerator consists of two modules. the des module supports symmetrical crypto algorithms according to the data encryption standard in the electronic code book mode. the ec2 module accelerates the multiplication in gf(2 n ) and therefore the operations for elliptic curve cryptography.
sle 66cx320p preliminary short product information 7 / 7 07.99 the random number generator (rng) is able to supply the cpu with true random numbers on all conditions. as an important measure, the chip provides a new and enhanced level of on-chip security features. in conclusion, the sle 66cx320p fulfills the requirements of today's chip card applications, as banking, gsm, pay tv, security access and digital signature and offers a powerful platform for future multi application cards. the sle 66cx320p integrates outstanding memory sizes, additional peripherals in combination with enhanced performance and optimized power consumption on a minimized die size. therefore, the sle 66cx320p offers the basis for a generation of new chip card applications.
|
