Kerkey:Security Module for Smartmetering system

The Kerkey device implements the commands defined by the BSI for the Security Module of a Smart Meter Gateway as well as Global Platform v2.1.1 commands.

Key Features

  • Protection profile for the Security Module of a Smart Meter Gateway (Security Module PP)
  • ECC support for NIST-P-256
  • Digital signature generation and verification with ECDSA
  • Key agreement with Diffie-Hellman (ECKA-ECDH) and El Gamal (ECKA-EG)
  • PACE with ECDH-GM-AES-CBC-CMAC-128 for secure messaging
  • On-chip ECC key pair generation
  • ISO7816-4 file system with EFs, DFs and ADFs, including nesting of DFs
  • Key pair, public key and PIN objects
  • Extended length APDUs
  • ECOPACK® 32-lead VFQFPN 5x5 mm (0.5 mm pitch)
  • Platform
    • Java Card™ inside (Version 2.2)
    • GlobalPlatform™ (Version 2.1.1)
    • ISO/IEC 7816 T=0 and T=1 contact protocols
    • Common personalization specification (CPS) compliant
  • Hardware
    • 30-year data retention at 25° C
    • 80 Kbytes of User EEPROM including 128 bytes of User OTP area:
      • 30-year data retention at 25° C
      • 500,000 erase/write cycles at 25° C
      • 1 to 64 bytes Erase or Program in 1.5 ms
    • Operating temperature: –25° to +85° C
    • Enhanced NESCRYPT crypto-processor for public key cryptography
    • Hardware security enhanced DES accelerator
    • Contact assignment compatible with ISO/IEC 7816-3 standards
    • Asynchronous receiver transmitter (IART) for high speed serial data support (ISO/IEC 7816-3 and EMV™ compliant)
    • ESD protection greater then 6 kV (HBM)
    • 3V and 5V supply voltage ranges
    • EMVCo / CC (EAL6+) certification
  • Security
    • DES/3DES, RSA, ECC and AES
    • Enhanced cryptographic algorithms:
      • DES/3DES, RSA, ECC and AES
      • SEED, SHA-1, SHA-256, MD5 and CRC16
      • Password Authenticated Connection Establishment (PACE) protocol
    • Differential power analysis (DPA) and differential fault analysis (DFA) countermeasures against side channel attacks
    • Active shield
    • ISO 3309 CRC calculation block
    • Memory protection unit (MPU)
    • Unique serial number on each die
Product Specifications
DescriptionVersionSize
DB2075: Security Module for Smartgrid applications2.0183 KB
Presentations
DescriptionVersionSize
Embedded Java & Secure Element for high security in IoT systems19.02 MB
Flyers
DescriptionVersionSize
KERKEY & Embedded Java - Secure element in IoT systems842 KB
Brochures
DescriptionVersionSize
Brochure_Secure MCUs_Secure Soluions_RS6103_BRSMCU0616.pdf1 MB
Sample & Buy
Part NumberQuantityUnit Price (US$) *PackagePacking TypeECCN (EU)ECCN (US)Country of Origin
KERKEY--DICENot ApplicableNECEAR99-
Quality & Reliability
Part NumberPackageRoHS Compliance GradeMaterial Declaration**
KERKEYDICEN/A
Security Module for Smartgrid applications KERKEY
Security Module for Smartgrid applications KERKEY
Security Module for Smartgrid applications KERKEY
ST Payment Secure Solution - Java Card™ platform Dual interface with 240 Kbyte of user NVM STPAY-GOLD