sematicon se.SAM™ P220 miniPCIe Cryptomodule – Keys in Hardware for the Industry

The se.SAM™ P220 Cryptomodules

se.SAM™ P220 Serie – The module for time based cryptography The module based on the P210 series but includes an additional very robust and precise real time clock. This enalbes the module to generate temporary keys (ephemeral keys) or to change and syncronize keys – ohne Datenverbindung – on a regular base. In addition, the direct use of a clock enables independent time stamps or the verification of time-based one-time passwords.

The se.SAM™ P220 – simple, universal with extended features and cryptofunctions

• Suitable and tested for industry, IT and office operation
• Long-term availability
• Extreme temperature ranges -40°C to +90°C
• Driverless – “Plug & Play“ – Independent of OS or CPU-Architectures
• No libraries or special software necessary
• Isolated storage areas for protecting cryptographic keys and data
• Cost-efficient integration by short training periods
• Integrated PIN-Management
• Integrated Real-Time-Clock (RTC) for time based crypto features

Integrated clock for dynamic key management

Thanks to the integrated real-time clock, the module is able to create keys independently and keep them synchronised with other modules even without an external power supply or connectivity. Thus, offline verification of one-time passwords (OTP) or certificates is easily possible. The independent real-time clock can of course also be integrated into your individual applications.

Technical specifications

Cryptography

• Key storage: 10 symmetric keys and 10 asymmetric key pairs with certificate
• Symmetric algorithms: AES CBC, AES, CTR, AES ECB each with 128 and 256 bit, SHA1-HMAC, SHA256-HMAC, SHA384-HMAC, SHA512-HMAC, CMAC-128
• Asymmetric algorithms: RSA 512 to 4096, ECC-NIST-P/secp192r1 to 521r1, ECC-Brainpool 160 to 512, ECC Koblitz/secp160k1 to 256k1, ECDSA , ECDHHASH digest: SHA1, SHA-2-224 to 512
• Key derivation function: HKDF
• Additional functions: Secure Hardware-Counter, “Multi Source True Random Number Generator“, Key-ACLs, Secure Key Exchange, firmware update, which can be disabled, cryptographic self-test, Secure Key Import, Key Usage Counter, integrated precise real-time clock for automatic key management

Certifications

• Common Criteria EAL6+ (hardware and operating system of the crypto-processor)
• Compliant to EU-directive 2014/32/EU and the WELMEC Software Guide for Measuring Instruments (V7.2, 2015)

Connection

• Full-Size PCI Express Mini Card (USB-Pins)

Module features

• Size (LxWxH): 50,95 x 30 x 6,3 mm
• Weight: up to 35g
• Temperature range: -40°C to +85°C
• Humidity rating: 0% – 100% (without condensation)
• Data memory retention: over 15 years
• Immunity (ESD): 4 kV contacted discharge (Performance Criteria A), 8 kV air discharge (Performance Criteria A), EN55024:2010, EN61000-6-2:2005
• Immunity (EMI): 10V/m from 80 MHz to 1 GHz (Performance Criteria A), 3V/m from 1GHz to 2,7 GHz (Performance Criteria A), EN55024:2010, EN61000-6-2:2005
• Emission (EMR): EN55032:2012
• Accuracy of time: ±1 ppm @ 25°CVoltage: 3,3 V (DC)
• Power supply: up to 25 mA (under load)
• EU-directives (CE marking): 2012/19/EU (WEEE), 2011/65/EU and 2015(863/EU /RoHS), 2014/30/EU (EMC)