![NXP Semiconductors LPC43Sxx Скачать руководство пользователя страница 106](http://html1.mh-extra.com/html/nxp-semiconductors/lpc43sxx/lpc43sxx_user-manual_1721827106.webp)
UM10503
All information provided in this document is subject to legal disclaimers.
© NXP B.V. 2015. All rights reserved.
User manual
Rev. 2.1 — 10 December 2015
106 of 1441
8.1 How to read this chapter
AES encryption and decryption and the AES API are supported for parts LPC43Sxx only.
8.2 Features
•
Decryption of external image data.
•
Encryption of data.
•
Secure storage of AES keys.
•
Support for Cypher-based Message Authentication Code (CMAC) hash calculation to
authenticate data.for the boot image only
•
Support for two secret hardware keys that cannot be read.
•
AES engine peak performance of 0.5 byte/clock cycle.
•
AES engine supports:
–
Electronic Code Book (ECB) decode mode with 128-bit key.
–
Cypher Block Chaining (CBC) decode mode with 128-bit key.
–
CMAC hash calculation (see
) for the boot image only.
•
The AES engine is compliant with the FIPS (Federal Information Processing
Standard) Publication 197, Advanced Encryption Standard (AES).
•
Random Number Generator (RNG) is supported by the AES API and passes the
following tests:
–
diehard
–
FIPS_140-1
–
NIST
•
Data is processed in little endian mode. This means that the first byte read from flash
is integrated into the AES codeword as least significant byte. The 16th byte read from
flash is the most significant byte of the first AES codeword.
•
DMA transfers supported through the GPDMA.
Details of the AES decryption pertaining to the boot process are described in
Remark:
For other decode modes (Cipher Feedback (CFB), Output Feedback (OFB), and
Counter (CTR)), please contact the NXP sales office.
8.3 General description
The secure parts provide an on-chip hardware AES decryption and encryption engine to
protect the external image content and to accelerate processing for data decryption, data
integrity, and proof of origin. AES decryption can be applied to an external boot image
using a key that is itself encrypted and is stored in the OTP. This key cannot be read by
software or by any other means, and its encryption is unique for each part. In addition,
data can be encrypted or decrypted by the AES engine using the encrypted key in the
UM10503
Chapter 8: LPC43Sxx Security API
Rev. 2.1 — 10 December 2015
User manual