| |
 A Trusted Environment for Mobile Applications
CryptoCell is a complete embedded security platform for mobile devices. It provides an outstanding level of security, while overcoming the challenges of performance, power consumption and silicon footprint. Its flexible architecture offers semiconductor vendors and device manufacturers a robust solution that can be tailored to meet today’s demanding mobile security requirements. CryptoCell can be deployed across multiple platforms and operating systems to secure a broad range of mobile applications.
Securing a Mobile Evolution
As the computing power of smartphones, feature phones and other mobile devices increases, data applications and services are seen as the major catalyst for revenue generation. Discretix pioneered mobile security to enable data applications and protect this new generation of devices from a growing range of threats.
Integrated Architecture – Robust Protection
The CryptoCell platform is deployed as an integral part of the device to deliver the highest level of security and performance. The solution’s multi-layered architecture ensures that all components of the device and its applications are secured. CryptoCell is delivered as a tested and ready-to-implement platform.
| Applications & Toolkits Layer |
|
Essential security components for applications such as DRM, Mobile TV, FOTA, SIM Lock, and IPSec (VPN). To ensure secure implementation, these toolkits are integrated with the Discretix middleware and hardware layers. |
|
|
|
| System Security Middleware Layer |
|
The security middleware layer provides secure access to the hardware cores and serves as a robust security infrastructure for the application layer. It also provides secure storage, cryptographic schemes, key management and certificate management across multiple platforms and operating systems.
The secure boot mechanism supports different stages in the device life cycle and completes the system security solution. |
|
|
|
| Hardware Core Layer |
|
The hardware layer is delivered as IP for easy integration into ICs. Discretix patented technology implements the standardized cryptographic algorithms in a way that minimizes gate count and power consumption while maximizing performance and security. |
|
Attack-Resistant
Cryptographic Core |
|
Discretix deploys unique and patented mechanisms to provide robust protection against:
- Timing Attacks (TA)
- Fault Attacks (FA)
- Power Analysis
Robust countermeasures span across all layers of the solution architecture.
CryptoCell is delivered as a tested and ready-to-implement platform. |
|
CryptoCell Hardware Architecture
The CryptoCell family of products offers optimized solutions for every mobile handset
| Feature |
Components |
Benefit |
| Flexible system design |
Slave bus interface |
Standard bus interface |
| DMA interface |
Off-loading system processor |
| FIFO interface |
High-speed streaming with no host intervention |
| API |
Multiple standard options for various OS: Discretix CRYS API; Symbian Cryptography Library API; Linux Cryptographic Library; Windows Mobile CAPI |
Cryptographic
capabilities |
Cryptographic cores |
State-of-the-art high throughput and ultra-small engines
Public Key Algorithms: RSA; ECC; DH
Symmetric Algorithms: AES; DES/3DES; RC4
Hash Algorithms: MD5; SHA1; SHA256/384/512; HMAC
Random Number Generation: Deterministic; Non-deterministic |
| Asset protection |
Secure Boot |
Prevents modification or replacement of software code images residing in non-volatile storage |
| Secure Storage Enabler |
Protects confidentiality and integrity of data items in off-chip non-volatile memory |
| Key Manager |
Handles all key material internally, never exposing unencrypted keys outside CryptoCell |
| Secure Debug |
Prevents software-based debug and test attacks |
| Life Cycle |
Enables and disables security features throughout the life span of the device |
| Open system security |
Secure Execution Environment |
Runs protected applications in a secured domain |
| Multi-Master Manager |
Facilitates domain separation by preventing non-secure software attacks initiated from one domain to affect other domains |
| Memory Watcher |
Supervises access to system memory, enabling flexible run-time allocation of memory space to the various system masters |
| Performance |
Multi-Flow Manager |
Enables smart time-sharing of the Cryptographic Cores, offloading host from
management tasks |
| Master bus interface |
Off-loading system processor |
| Power Management |
Prolongs battery life |
|
|
