Description

DeepCover® embedded security solutions cloak sensitive data under multiple layers of advanced physical security to provide the most secure key storage possible.The MAXQ1061/MAXQ1062 cryptographic controller makes it fast and easy to implement full security for embedded, connected products without requiring firmware development. The MAXQ1061/MAXQ1062 coprocessor can be designed-in from the start or added to an existing design to guarantee confidentiality, authenticity, and integrity of the device. It is ideal for connected embedded devices, industrial networking, PLC, and network appliances.The embedded, comprehensive cryptographic toolbox provides key generation and storage up to full SSL/TLS/DTLS support by offering a high level of abstraction including TLS/DTLS key negotiation, ECDSA-based TLS/DTLS authentication, digital signature generation and verification, SSL/TLS/DTLS packet encryption, and MAC algorithms. It can also serve as a secure bootloader for an external generic micro controller.32KB of user-programmable EEPROM of MAXQ1061 or 8KB of MAXQ1062 securely store certificates, public keys, private and secret keys, monotonic counters, and arbitrary data. A flexible file system manages access rights for the objects. The device is controlled over a SPI or I2C interface. Life cycle management and a secure key loading protocols are provided.Cryptographic algorithms supported by the device include AES, ECC, ECDSA signature scheme, SHA, and MAC digest algorithms. The true random number generator can be used for on-chip key generation. A separate hardware AES engine over SPI allows the MAXQ1061/MAXQ1062 to function as a coprocessor for stream encryption.The advanced physical, environmental and logical protections, are designed to meet the stringent requirements of FIPS and Common Criteria EAL4+ certifications.ApplicationsInternet of Things (IoT)Portable Medical DevicesBuilding and Home AutomationSmart MeteringCertificate Distribution and ManagementSecure Access ControlElectronic Signature GenerationCybersecurity for Critical Infrastructures