The A71CL is a ready-to-use solution providing a root of trust at the IC level and proven,
chip-to-cloud security right out of the box. It is a platform capable of securely storing and
provisioning credentials, securely connecting IoT devices to cloud services and
performing cryptographic node authentication.
The A71CL solution provides security measures protecting the IC against physical and
logical attacks. The solution is meant to be integrated with a host platform and running
operating systems adding a chain of trust for a broad range of applications. The product is
delivered with a manual and documents to provide guidance on its integration.
Product short data sheet
COMPANY PUBLIC
NXP Semiconductors
2. General description
2.1 A71CL naming conventions
The following table explains the naming conventions of the commercial product name of
the A71CL products. Every A71CL product gets assigned such a commercial name, which
includes also customer and application specific data.
The A71CL basic type names have the following format.
A71CLxagpp(p)
The ‘A71CL’ is a constant, all other letters are variables, which are explained in Table 1.
Table 1.A71CL commercial name format
VariableMeaning ValuesDescription
xIC hardware specification
aembedded operating
gembedded application
pp(p)package type code
code
system code
firmware (applet) code
dd(d)= Delivery Type,
TK2= HVSON8 (4x4)
A71CL
Plug & Trust Secure Element
1standard operational ambient temperature:
−25 °C to +85 °C
I2C interface supported
2standard operational ambient temperature:
−40 °C to +90 °C
I2C interface supported
CJava card operating system
LL is a fixed value = IoT security applet pre
installed
2.2 I2C interface
The A71CL has an I2C interface in slave mode, supporting data rates up to 400 kbit/s
operating in Fast-Mode (FM). The I2C interface is using the Smartcard I2C protocol as
defined in Ref. 3 which is based on SMBus.
Depending on the interface pins state at boot, see Section 7 “Pinning information” for
more details; the default I2C address after power-on-reset is 0x90 for Write, and 0x91 for
Read.
2.3 Security licensing
NXP Semiconductors has obtained a patent license for SPA and DPA countermeasures
from Cryptography Research Incorporated (CRI). This license covers both hardware and
software countermeasures. It is important to customers that countermeasures within the
operation system are covered under this license agreement with CRI. Further details can
be obtained on request.
Secure, zero-touch connectivity
End-to-end security, from chip to edge to cloud
Secure credential injection for IC-level root of trust
Fast design-in with complete product support package
Easy to integrate with different MCU platforms
3.2 Security features
The A71CL security concepts includes many security measures to protect the chip.
The A71CL operates fully autonomously based on an integrated Javacard operating
system and applet. Direct memory access is possible by the fixed functionalities of the
applet only. With that, the content from the memory is fully isolated from the host system.
Attack protection by integrated design measures in the chip layout, the logic and the
functional blocks.
A71CL
Plug & Trust Secure Element
3.3 Cryptography features
Message digest with SHA1, SHA224, SHA256
Random number generator
Asymmetric key storage type: RSA Standard or RSA CRT
Auto RSA key generator ranges from 512-bit key length to 2048-bit key length. Either
RSA Standard or RSA CRT.
Symmetric encryption/decryption with DES_CBC_NOPADDING,
Asymmetric encryption/decryption with RSA_NOPADDING, RSA_ PKCS1.
Asymmetric signature/verification with RSA_SHA1(PKCS1), RSA_SHA256.
Service data storage: the storage data read and write is protected by SCP.
SCP 02 service with option “i” = ‘55’.
400 kbit/s I2C Fast-mode interface
−40 °C to +90 °C operational ambient temperature (A7102)
On-chip Javacard operating system
40 µA typical sleep mode current with I2C pads in tristate mode
10 µA max deep sleep mode current with I2C pads in tristate mode
High-performance Public Key Infrastructure (PKI)
EEPROM with min 500,000 cycles endurance and min 25 years retention time
HVSON8 package
The A71CL uses I2C as communication interface as described in the following section.
The A71CL commands are wrapped using the Smartcard I2 protocol (SCI2C). The
detailed documentation for the A71CL commands in the APDU Specification and SCI2C
encapsulation (Ref. 3) is available in NXP DocStore.
The A71CL has an I2C interface in slave mode, supporting data rates up to 400 kbit/s
operating in Fast-Mode (FM). The I2C interface is using the Smartcard I2C protocol as
defined in Ref. 3 which is based on SMBus. Depending on the interface pins state at boot,
see Section 7 for more details. The default I2C address after power-on-reset depends on
the bootup condition as shown in Table 5.
6.2 Automatic Communication Mode detection at Power on
The IC configures its interface according to the pin state as shown in the table below. The
host system must keep the voltage levels stable at these pins for at least 500 µs after
power-on-reset.
A71CL
Plug & Trust Secure Element
Table 5.I2C address
Value at startupI2C address
IF0IF1I2C_SCLI2C_SDAWriteRead
0x00n.a.n.a.
10110x900x91
11110x920x93
6.3 Power-saving modes
The device provides two power-saving operation modes, the SLEEP mode and the DEEP
SLEEP mode. These modes are activated via pad RST_N (DEEP SLEEP mode) or by the
device.
6.3.1 SLEEP mode
The SLEEP mode has the following properties:
• all internal clocks are frozen,
• CPU enters power saving mode with program execution being stopped,
• CPU registers keep their contents,
• RAM keeps its contents,
The A71CL enters automatically into SLEEP mode and also wakes up automatically from
SLEEP mode. In SLEEP mode, all internal clocks are stopped. The IOs hold the logical
states they had at the time IDLE was activated. During SLEEP mode security sensors
HVS, LVS, LTS, HTS, Light Sensors, Glitch Sensors and Active Shielding are disabled.
There are two ways to exit from the SLEEP mode:
• A reset signal on RST_N
• An External Interrupt edge triggered by a falling edge on I2C_SDA
I2C_SCL1I2C clock
VSS2ground
IF03interface activation, apply high on startup
n.c.4not connected
IF15I2C address selection
RST_N6reset input, active LOW
VCC7power supply voltage input
I2C_SDA8I2C data
The A71CL product is available on 7” tape on reel and 13” tape on reel. Details are
provided in Table 7.
Table 7.Reel packing options
Package typeReel typeMinimum packing quantity
HVSON87” tape on reel1500
HVSON813” tape on reel
[1] For details about packing method, product orientation, tape dimensions and labeling for A71 parts in
HVSON8 package having an ordering code (12NC) ending 118 refer to Ref. 2.
[1]
10. Electrical and timing characteristics
A71CL
Plug & Trust Secure Element
6000
The electrical interface characteristics of static (DC) and dynamic (AC) parameters for
pads and functions used for I2C are in accordance with the NXP I2C specification (see
Ref. 1).
11. Limiting values
Table 8.Limiting values
In accordance with the Absolute Maximum Rating System (IEC 60134). Voltages are referenced to
VSS (ground = 0 V).
SymbolParameterConditionsMinMaxUnit
V
DD
V
I
I
I
I
O
I
lu
V
esd_hbm
V
esd_cdm
P
tot
T
stg
[1] MILStandard 883-D method 3015; human body model; C = 100 pF, R = 1.5 kΩ; T
[2] Depending on appropriate thermal resistance of the package.
[3] JESD22-C101, JEDEC Standard Field induced charge device model test method.
supply voltage-0.3+4.6V
input voltageany signal pad-0.3+4.6V
input currentpad I2C_SDA,
-10mA
I2C_SCL
output currentpad I2C_SDA,
-10mA
I2C_SCL
latch-up currentVI< 0 V or VI> V
electrostatic discharge
voltage (Human Body
Model)
electrostatic discharge
voltage (Charge Device
Model)
Testing measurements are performed at the contact pads of the device under test. All
voltages are defined with respect to the ground contact pad VSS. All currents flowing into
the device are considered positive.
13.1.1 General and I2C I/O interface
Table 10.Electrical DC characteristics of I2C_SCL, I2C_SDA and RST_N
SymbolParameterConditionsMinTypMaxUnit
Input/Output: I2C_SCL, I2C_SDA in push-pull mode
V
IH
V
IL
I
IH
HIGH level input voltage0.7 V
LOW level input voltage-0.5 0.3V
HIGH level input current in input
V
IHmin
< VI< V
mode
I
IL
V
OH
LOW level input currentV
ILmin
< VI< V
HIGH level output voltageIOH= −3.0 mA;
3V3 mode
IOH= −3.0 mA;
1V8 mode
V
OL
LOW level output voltageIOL= 3.0 mA
3V3 mode
IOL= 2.0 mA
1V8 mode
Input/Output: I2C_SCL, I2C_SDA in open-drain mode
V
IH
V
IL
I
IH
HIGH level input voltage0.7 V
LOW level input voltage-0.5 0.3V
HIGH level input current in input
V
IHmin
< VI< V
mode
I
IL
V
OL
LOW level input currentV
ILmin
< VI< V
LOW level output voltageIOL= 3.0 mA
3V3 mode
IOL= 2.0 mA
1V8 mode
Input: RST_N
V
IH1
V
IL1
I
IH1
I
IL1
HIGH level input voltage0.7 V
LOW level input voltage-0.3 0.3V
HIGH level RST_N input current V
IH1min
≤ VI≤ V
LOW level RST_N input current 0 V ≤ VI≤ V
IHmax
ILmax
IHmax
ILmax
DD
IL1max
DD
[2]
[2]
[3]
;
[3]
0.7 V
0.7 V
DD
DD
DD
DD
[1]
V
Imax
DD
V
V
± 10µA
± 10µA
V
V
0.4V
0.2 V
V
Imax
DD
[1]
DD
V
V
V
± 10µA
± 10µA
0.4V
0.2 V
V
Imax
DD
[1]
DD
V
V
V
± 20µA
± 20µA
[1] Maximum value according to Table 9 “Recommended operating conditions”
[2] : External pull-up resistor 20 kΩ to VDD. The worst case test condition for parameter VOH is present at minimum VDD. For class A supply
voltage conditions VDD= 4.5 V is the worst case with respect to the fix specification limit V
related limit “0.7 VDD“is a stricter requirement than the fix value 3.8 V at high VDD (0.7 VDD= 3.85 V at VDD= 5.5 V). So, in the V
range 4.5 V to 5.5 V, V
[3] The active low RST_N input internally has a resistive pull-down device to VSS. Accordingly a current is flowing into the pad voltages
above 0 V. Figure 4 shows the RST_N input characteristic.
is specified as “the larger value of 0.7 VDD and 3.8 V, respectively”.
Table 11.Electrical characteristics of IC supply voltage VDD; VSS= 0 V; T
[1]
= -40 to +90 °C
amb
Symbol ParameterConditionsMinTypMaxUnit
Supply
V
DD
supply voltage range3V3 mode range
2.503.33.6V
CPU in free running mode
I
DD
no coprocessor activeCPU in free running mode6.37.0mA
EPROM programming in progress CPU in free running mode7.38.0mA
AES coprocessor activeCPU in free running mode9.310.3mA
ECC coprocessor activeCPU in free running mode13.715.1mA
I
DD(SLP)
I
DD(DSLP)
[1] All appropriately marked values are typical values and only referenced for information. They are subject to change without notice.
Table 12.Electrical characteristics of IC supply voltage VDD; VSS= 0 V; T
[1]
= -40 to +90 °C
amb
Symbol ParameterConditionsMinTypMaxUnit
Supply
V
DD
I
DD
supply voltage range1V8 mode range 1.621.81.98V
no coprocessor activeCPU in free running mode2.45mA
AES coprocessor activeCPU in free running mode2.7mA
ECC coprocessor activeCPU in free running mode7.5mA
I
DD(SLP)
I
DD(DSLP)
[1] All appropriately marked values are typical values and only referenced for information. They are subject to change without notice.
supply current SLEEP mode T
= 25 °C4080µA
amb
supply current deep sleep modeRST_N at 0V, T
RST_N at 0V, T
= 25°C10µA
amb
= 90°C10µA
amb
13.2 AC characteristics
Table 13.Non-volatile memory timing characteristics; VDD= 1.8 V ± 10% or 3 V ± 10% V; VSS= 0 V;
T
= -40 to 90 °C
amb
Symbol ParameterConditionsMinTypMaxUnit
t
EEP
t
EEE
t
EEW
t
EER
N
EEC
EEPROM erase + program time2.7ms
EEPROM erase time1.7ms
EEPROM program time1.0ms
EEPROM data retention timeT
EEPROM endurance
= +55 °C 25years
amb
5
5 × 10
cycles
(number of programming cycles)
Table 14.Electrical AC characteristics of I2C_SDA, I2C_SCL, and RST_N
VDD= 1.8 V ± 10% or 3 V ± 10% V; VSS= 0 V; T
= -40 to 90 °C
amb
[1]
;
Symbol ParameterConditionsMinTypMaxUnit
Input/Output: I2C_SDA, I2C_SCL in open-drain mode
tr
IO
tf
IO
tf
OIO
I/O Input rise timeInput/reception mode
I/O Input fall timeInput/reception mode
I/O Output fall timeOutput/transmission mode;
[1] All appropriately marked values are typical values and only referenced for information. They are subject to change without notice.
[2] tris defined as rise time between 20% and 80% of the signal amplitude.
[3] During AC testing the inputs RST_N, I2C_SDA, I2C_SCL are driven at 0 V to +0.3 V for a LOW input level and at VDD−0.3 V to VDD for
[4] tris defined as rise time between 30% and 70% of the signal amplitude.
Pin capacitances RST_N,
I2C_SDA, /I2C_SCL
tfis defined as fall time between 80% and 20% of the signal amplitude.
a HIGH input level. Clock period and signal pulse (duty cycle) timing is measured at 50% of VDD.
tfis defined as fall time between 70% and 30% of the signal amplitude.
Test frequency = 1 MHz;
T
= 25 °C
amb
-10pF
Fig 5.External clock drive and AC test timing reference points of I2C_SDA, I2C_SCL, and RST_N (see Table
Objective [short] data sheetDevelopmentThis document contains data from the objective specification for product development.
Preliminary [short] data sheet QualificationThis document contains data from the preliminary specification.
Product [short] data sheetProductionThis document contains the product specification.
[1] Please consult the most recently issued document before initiating or completing a design.
[2] The term ‘short data sheet’ is explained in section “Definitions”.
[3] The product status of device(s) described in this document may have changed since this document was published and may differ in case of multiple devices. The latest product status
information is available on the Internet at URL http://www.nxp.com.
[1][2]
Product status
17.2 Definitions
Draft — A draft status on a document indicates that the content is still under
internal review and subject to formal approval, which may result in
modifications or additions. NXP Semiconductors does not give any
representations or warranties as to the accuracy or completeness of
information included in a draft version of a document and shall have no
liability for the consequences of use of such information.
Short data sheet — A short data sheet is an extract from a full data sheet
with the same product type number(s) and title. A short data sheet is
intended for quick reference only and should not be relied upon to contain
detailed and full information. For detailed and full information see the
relevant full data sheet, which is available on request via the local NXP
Semiconductors sales office. In case of any inconsistency or conflict with
the short data sheet, the full data sheet shall prevail.
Product specification — The information and data provided in a Product
data sheet shall define the specification of the product as agreed between
NXP Semiconductors and its customer, unless NXP Semiconductors and
customer have explicitly agreed otherwise in writing. In no event however,
shall an agreement be valid in which the NXP Semiconductors product is
deemed to offer functions and qualities beyond those described in the
Product data sheet.
17.3 Disclaimers
Limited warranty and liability — Information in this document is believed to
be accurate and reliable. However, NXP Semiconductors does not give any
representations or warranties, expressed or implied, as to the accuracy or
completeness of such information and shall have no liability for the
consequences of use of such information. NXP Semiconductors takes no
responsibility for the content in this document if provided by an information
source outside of NXP Semiconductors. In no event shall NXP
Semiconductors be liable for any indirect, incidental, punitive, special or
consequential damages (including - without limitation - lost profits, lost
savings, business interruption, costs related to the removal or replacement of
any products or rework charges) whether or not such damages are based on
tort (including negligence), warranty, breach of contract or any other legal
theory. Notwithstanding any damages that customer might incur for any
reason whatsoever, NXP Semiconductors’ aggregate and cumulative liability
towards customer for the products described herein shall be limited in
accordance with the Terms and conditions of commercial sale of NXP
Semiconductors
[3]
Definition
Right to make changes — NXP Semiconductors reserves the right to make
changes to information published in this document, including without limitation
specifications and product descriptions, at any time and without notice. This
document supersedes and replaces all information supplied prior to the
publication here. — Suitability for use — NXP Semiconductors products
are not designed, authorized or warranted to be suitable for use in life
support, life-critical or safety-critical systems or equipment, nor in applications
where failure or malfunction of an NXP Semiconductors product can
reasonably be expected to result in personal injury, death or severe property
or environmental damage. NXP Semiconductors and its suppliers accept no
liability for inclusion and/or use of NXP Semiconductors products in such
equipment or applications and therefore such inclusion and/or use is at the
customer’s own risk. — Applications — Applications that are described
herein for any of these products are for illustrative purposes only. NXP
Semiconductors makes no representation or warranty that such applications
will be suitable for the specified use without further testing or modification.
Customers are responsible for the design and operation of their applications
and products using NXP Semiconductors products, and NXP
Semiconductors accepts no liability for any assistance with applications or
customer product design. It is customer’s sole responsibility to determine
whether the NXP Semiconductors product is suitable and fit for the
customer’s applications and products planned, as well as for the planned
application and use of customer’s third party customer(s). Customers should
provide appropriate design and operating safeguards to minimize the risks
associated with their applications and products. NXP Semiconductors does
not accept any liability related to any default, damage, costs or problem
which is based on any weakness or default in the customer’s applications or
products, or the application or use by customer’s third party customer(s).
Customer is responsible for doing all necessary testing for the customer’s
applications and products using NXP Semiconductors products in order to
avoid a default of the applications and the products or of the application or
use by customer’s third party customer(s). NXP does not accept any liability
in this respect. — Limiting values — Stress above one or more limiting
values (as defined in the Absolute Maximum Ratings System of IEC 60134)
will cause permanent damage to the device. Limiting values are stress ratings
only and (proper) operation of the device at these or any other conditions
above those given in the Recommended operating conditions section (if
present) or the Characteristics sections of this document is not warranted.
Constant or repeated exposure to limiting values will permanently and
irreversibly affect the quality and reliability of the device. — Terms and conditions of commercial sale — NXP Semiconductors products are sold
subject to the general terms and conditions of commercial sale, as published
at http://www.nxp.com/profile/terms, unless otherwise agreed in a valid
written individual agreement. In case an individual agreement is concluded
only the terms and conditions of the respective agreement shall apply. NXP
Semiconductors hereby expressly objects to applying the customer’s general
terms and conditions with regard to the purchase of NXP Semiconductors
products by customer. — No offer to sell or license — Nothing in this
document may be interpreted or construed as an offer to sell products that is
open for acceptance or the grant, conveyance or implication of any license
under any copyrights, patents or other industrial or intellectual property
rights. — Export control — This document as well as the item(s) described
herein may be subject to export control regulations. Export might require a
prior authorization from competent authorities — Non-automotive qualified products — Unless this data sheet expressly states that this specific NXP
Semiconductors product is automotive qualified, the product is not suitable for
automotive use. It is neither qualified nor tested in accordance with automotive
testing or application requirements. NXP Semiconductors accepts no liability
for inclusion and/or use of non-automotive qualified products in automotive
equipment or applications. In the event that customer uses the product for
design-in and use in automotive applications to automotive specifications and
standards, customer (a) shall use the product without NXP Semiconductors’
warranty of the product for such automotive applications, use and
specifications, and (b) whenever customer uses the product for automotive
applications beyond NXP Semiconductors’ specifications such use shall be
solely at customer’s own risk, and (c) customer fully indemnifies NXP
Semiconductors for any liability, damages or failed product claims resulting
from customer design and use of the product for automotive applications
beyond NXP Semiconductors’ standard warranty and NXP Semiconductors’
product specifications. — Translations — A non-English (translated) version
of a document is for reference only. The English version shall prevail in case
of any discrepancy between the translated and English versions. — Security
— While NXP Semiconductors has implemented advanced security features,
all products may be subject to unidentified vulnerabilities. Customers are
responsible for the design and operation of their applications and products to
reduce the effect of these vulnerabilities on customer’s applications and
products, and NXP Semiconductors accepts no liability for any vulnerability
that is discovered. Customers should implement appropriate design and
operating safeguards to minimize the risks associated with their applications
and products. — 17.4 Licenses
ICs with DPA Countermeasures functionality
NXP ICs containing functionality
implementing countermeasures to
Differential Power Analysis and Simple
Power Analysis are produced and sold
under applicable license from
Cryptography Research, Inc.
17.5 Trademarks
Notice: All referenced brands, product names, service names and trademarks
are the property of their respective owners.
FabKey — is a trademark of NXP B.V.
I2C-bus — logo is a trademark of NXP B.V.
18. Contact information
For more information, please visit: http://www.nxp.com
For sales office addresses, please send an email to: salesaddresses@nxp.com
Please be aware that important notices concerning this document and the product(s)
described herein, have been included in section ‘Legal information’.