MPC5744P compatible HSM

[LCGSEMS]

Hello everyone.

We are using MPC5744P. And we check the MCU does not have HSM.

Please let me know what is the MPC5744P compatible HSM.

We are trying to apply digital signature such as RSA or ECC.

[lukaszadrapa]

Hi @LCGSEMS 
The only option in MPC57xx family is MPC5748G which contains HSM module. Some other MPC57xx devices has CSE module only which meets SHE requirements. So, there's no support for RSA or ECC.

However, MPC5748G with HSM firmware is provided only to approved customers (expecting large ordering quantity) due to limited support. Notice that standard MPC5748G devices does NOT have HSM firmware installed. Devices with HSE firmware has special part numbers. If you are interested, please contact local NXP sales office.

Anyway, much better option is to migrate to S32K3 devices which has HSE module. HSE firmware can be used by all customers. It does support RSA and ECC.
https://www.nxp.com/products/processors-and-microcontrollers/s32-automotive-platform/s32k-auto-gener...
It's also newer device, so guaranteed availability is longer:
https://www.nxp.com/products/nxp-product-information/nxp-product-programs/product-longevity:PRDCT_LO...

Regards,
Lukas

[LCGSEMS]

Thanks for quick response.
I also want to know NXP has add-on HSM.
Add-on means that it is not inherited in MCU, but external to MCU.
Because it is hard to change the MCU, we want to add the HSM chip if it is.
Thanks

[lukaszadrapa · Accepted solution]

I can't see suitable device for this.

Have you considered SW emulation? There are libraries like Mbed TLS or wolfSSL which could help to implement it. That's the most cost-effective solution.

Otherwise I think that S32K3 would be the best option.

Regards,

Lukas