Renesas Electronics America Inc. © 2010 Renesas Electronics America Inc. All rights reserved. Secure MCU REA FAE Training – June A Rev Date 06/15/2010 N. Ramatchandirane – Secure MCU

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 2 M to M Authentication Embedded interface (I2C) Small package N Series USB Secure Token * Under development AE56U NFC NFC Series* Renesas in the Secure MCU market Contact Smart Card AE4 Series AE5 Series RS4 Series Banking, ID card Contactless Smart Card AE41R RS4X Series* Banking card Mobile Phone General Promotion Selected OEM support only Embedded Enterprise

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 3 Levels of security Software security BAD Memory chip security Almost as BAD Board ID SECURE Strong crypto Tamper proof PKI for Embedded Systems Avnet VAS Keys NOT protected CPU intensive (can be OK for PKI comp. by the host) (encryption alone is NOT security) Outdated key lengths (like a ‘ 2 digits ’ PIN code) We bring proven Web user authentication technology to Embedded Systems

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 4 Low Cost Security Solutions Maxim 1-wire Secure EEPROM – 1Kb – SHA-1 Atmel CryptoAuthentication – SHA-256, authentication only Atmel CryptoMemory – 1Kb to 256Kb – Proprietary 64bit symmetrical keys

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 5 Algorithms for Security SHA-1 / SHA-256 Simple message digest Not “true” encryption – Mostly used for digital signature signing SHA-1 retired from use by US government Symmetrical Cryptography Proprietary, DES, 3DES, AES – 64, 128, 256bit keys Symmetrical keys used on both sides – Keys must be handled with the highest security – Sharing of common keys can lead to compromise – Any key compromise affects every unit Asymmetrical Cryptography RSA, ECC 1024, 2048, 4096 bit keys Uses public / private key pairs – Private keys are all different – Compromise of a single key only affects a single unit Can be more complex to implement

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 6 Case Study Background: Large, well known camera manufacturer Battery Cloning Issues – Direct Revenue Loss – Warranty Issues – LiIon Battery Safety Issues Solution Low cost SHA-1 based security device Result Camera firmware hacked to obtain keys Low cost microcontroller used to imitate security device Cloned batteries available within 3 months FAIL

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 7 Characteristics of a Secure Solution Must be based on strong cryptography Must provide for secure key storage Must provide a defense against physical attacks Physical attack on bare die Voltage Frequency Temperature Must include a secure supply chain Key generation / provisioning Device Programming

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 8 Board ID use examples

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 9 A complete one-stop-shop solution from Avnet 1- Devices are manufactured in secure Renesas facility and locked. 2- User data provided to Avnet, user keys and X509 certificates are generated by Avnet’s secure servers, 3- Devices are programmed and locked in Avnet’s secure programming center, every chip unique. 4- After programming devices are shipped only to customer or customer approved CM. 5- Entire process is auditable, customer required records produced as needed. Avnet: A Secure Supply Chain for Secure Products

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 10 Programming & Security Device Support Key Features of Programming Security Devices Preventing Duplication Traceability File and Data Storage – Customizable on a device by device basis – Serial Numbers – MAC Addresses IP Security Concurrency (High Volume) Scalability (High Volume) AVNET HAS THEM ALL COVERED

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 11 Why Bigfoot Network selected Board ID? 1- Strong authentication (RSA 2048 Bit) with tamper-proof chip 2- Easy integration of Board ID in customer design (fast TTM) 3- Avnet support services: - logistics and key/cert programming services (root cert provided by Bigfoot Networks to keep control of the chain of trust) - unique data serialized and programmed in each chip - strong support for all phases of development: sample evaluation, pre- production test and validation and MP ramp up. 4- REA experience in the Security IC market

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 12 Board ID Strengths 1- Unmatched web user like authentication 2- Built with proven PKI technology and standards 3- Strong authentication solution ideal for a high growth market: devices connected to the internet 4- COMPLETE, UNIQUE SOLUTION DEPLOYABLE NOW. Avnet will: - Provide full quotation including VAS - Handle NDA, Educate, and Support customer - Provide a unique product and logistics service (One stop shop) 5- Top companies have selected Board ID as the authentication solution in their system. Current shipment: several M units / month (same prod. family as Board ID)

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 13 What is available now Board ID kit with complete software (can be ordered from Avnet) Board ID 1.0 product (ready for MP) Full documentation (from REA and from Avnet): Without NDA: flyers, data sheet, brochures, info online (REA site – section Board ID) Sales documentation (new Board ID page on sales Reps site) With NDA: User manuals (Board ID chip, Board ID Kit), demo kit and related documentation and software Avnet programming services: Key/cert generation Production of samples (first articles) Support services on kit, Board ID chip and MP ramp up Training material (ppt): Sales, FAE (on P drive) New training course ‘Board ID overview’ on Renesas Interactive Support from REA mktg and Avnet technical team

REA INTERNAL USE ONLY © 2010 Renesas Electronics America Inc. All rights reserved. 14 Board ID product, tools and programming services are now ready for deployment. are now ready for deployment. We look forward to supporting an aggressive promotion effort by REA Sales and FAEs and Avnet teams!

Renesas Electronics America Inc. © 2010 Renesas Electronics America Inc. All rights reserved.