STSAFA120S8SPL05

Overview

The STSAFA120S8SPL05 is a secure authentication companion device from STMicroelectronics, designed for consumables, accessories, and connected objects. It provides cryptographic services including hashing, encryption, and decryption via a secure operating system on a secure microcontroller. The component operates within a supply voltage range of 1.8 V to 3.3 V and supports an industrial temperature range of -40°C to 105°C. Packaged in an 8-SO (SO-8) surface-mount case with Tape & Reel or Cut Tape options, it features unique ID authentication, configurable secure storage, and support for TLS 1.2/1.3 handshakes.

Feature Summary

• Supports advanced asymmetric cryptography with five nonvolatile ECC private key slots plus one ephemeral slot, covering NIST P-256/P-384/P-521, Brainpool, Edwards 25519, and Curve25519 curves.
• Enables secure connection establishment with remote hosts using Transport Layer Security (TLS 1.2 and TLS 1.3) handshakes.
• Provides symmetric data encryption and decryption using AES-128/256 with sixteen key slots supporting CCM, ECB, GCM, CMAC, and HKDF modes.
• Offers signature verification services for secure boot and firmware upgrades, alongside usage monitoring via secure counters.

Applications

• Authentication for consumables and accessories to prevent cloning.
• Secure connection and pre-attachment of connected objects to cloud platforms such as Azure and AWS.
• Compliance with Qi 1.3 and Qi 2.0 wireless chargers.
• Matter-compatible smart home devices.
• Digital power supplies adhering to OCP M-CRPS standards.

Procurement Notes

Verify the package configuration matches the required 8-SO form factor. Confirm the supply voltage requirements align with the 1.8 V to 3.3 V operational range. Ensure the application environment stays within the specified -40°C to 105°C industrial temperature limits. Check that the host processor supports the necessary interfaces for secure channel pairing and cryptographic service requests.

Selection Notes

Select this component when dedicated hardware security for identity authentication and key management is required. It is suitable for applications needing robust protection against cloning and unauthorized access. Consider its support for multiple elliptic curve algorithms if complex cryptographic protocols are necessary. Evaluate the need for local secure storage versus remote host envelope wrapping based on system architecture constraints.

Part Context

This part belongs to the STSAFE-A120 family of secure elements. It serves as a companion device to host processors, offloading sensitive cryptographic operations and secure data management tasks. The series is engineered to provide a turnkey solution for securing IoT devices, consumer electronics, and industrial equipment against physical and logical attacks.

Replacement Considerations

Publicly confirmed substitute part numbers are not available in the provided documentation. Verify compatibility with existing host software stacks before considering alternative secure element families.

FAQ

What elliptic curves does the STSAFA120S8SPL05 support?

It supports NIST P-256, P-384, P-521; Brainpool P-256, P-384, P-512; Edwards 25519; and Curve25519.

Can this device establish secure connections with remote hosts?

Yes, it supports secure connection establishment with remote hosts including Transport Layer Security (TLS 1.2 and TLS 1.3) handshakes.

How many nonvolatile private key slots are available?

The device includes five nonvolatile private key slots for Elliptic Curve Cryptography (ECC) plus one ephemeral ECC key slot.