Silicon Labs EFR32xG21B SoC & xGM210P Modules with Secure Vault

Silicon Labs EFR32xG21B SoCs and xGM210P Modules with Secure Vault help address the challenges of a changing landscape and keep pace with regulations. Silicon Labs has introduced Secure Vault, a platform for securing and future-proofing loT devices. Secure Vault features Secure Key Management. Cryptography is core to security, and a foundational element to cryptography is the secrecy of its keys. Protecting those keys is the primary objective of any security system. Secure Vault takes advantage of a unique digital fingerprint generated by a physically unclonable function. This is used to create an AES symmetric key that physically disappears when the system powers down. The AES symmetric key doesn’t even exist when the chip is off. This is an extremely effective solution to the key management challenge. The function can scale to support a vast number of keys as required by the developer application. Secure Vault also includes a tamper detection system so the key cannot be reconstructed once the device is shut down after a tamper event. Secure Vault is the most advanced suite of hardware and software security protection available today.

Silicon Labs EFR32MG21, a wireless SoC with Secure Vault has been awarded PSA Certified Level 3 status. PSA Certified is a respected security body for Internet of Things (IoT) hardware, software, and devices co-founded by Arm.

Features

  • Secure Device Identity Certificate, conceptually, similar to a birth certificate, for each individual silicon die, enabling post-deployment security, authenticity, and attestation-based health checks, guaranteeing the authenticity of the chip for its lifetime
  • Advanced Tamper Detection enables developers to set up appropriate response actions when the device experiences unexpected behaviors, such as extreme voltage, frequency, and temperature variations, which could indicate a vulnerability
  • Secure Key Management and Storage, a central component to protect against direct access to a loT device and its data by encrypting and isolating the keys from the application code and using a master key-encryption key (KEK) generated from physically unclonable function (PUF) hardware

Overview

Silicon Labs EFR32xG21B SoC & xGM210P Modules with Secure Vault

Videos

Silicon Labs EFR32xG21B SoC & xGM210P Modules with Secure Vault