Hardware
Embedded Security Modules (ESM)
Elliptic has introduced the Embedded Security Module which is defined as an IP core which contains a number of cryptographic elements implemented behind a common AMBA interface. By coupling this capability with a secret key and private AES context, Elliptic can offer a very high level of security for volume applications such as cell phones, point of sale terminals, anti-counterfeiting and mobile music or video players. Elliptic now has five embedded security modules:
- ESM-01 DTCP Embedded Security Module
- ESM-02 Payment Card Industry Embedded Security Module
- ESM-03 Windows DRM for Mobile Embedded Security Module
- ESM-05 Anti-counterfeiting Embedded Security Module
The ESM-01 Embedded Security Module implements the DTCP digital rights management design. The ESM is easily extended to support Microsoft DRM and OMA 2.0. Elliptic has also released its new DTCP middleware that includes the DTCP stack and a content protection demonstration of streaming digital video. For more information please follow the link to the product page.
The ESM-02 Embedded Security Module implements all of the symmetric and asymmetric cryptography requirements for the new payment card industry (PCI) standard. This standard is quite rigorous and requires that the SoC incorporate security cores featuring both power analysis resistance (differential and simple analysis) and differential timing analysis resistance. Elliptic uses proprietary hardware technology to implement resistance to these attacks. The core can also be used for high security modules (HSMs), smart cards and TPM designs.
The ESM-03 is designed to address the Personal Multimedia Player (PMP) through a low gate count solution that implements Windows DRM for Mobile which is also known as PlaysForSure(TM). The PMP market is divided into two dominant technologies - the very successful Apple iPOD with FairPlay DRM which has overall market leadership and MP-3 players that support Windows DRM (WMA) offered by a wide variety of manufacturers. The ESM-03 is configured for Windows DRM support but can easily be upgraded to support FairPlay if required.
Manufacturers in networking, pharmaceuticals and high end retail products are looking for a low cost, anti-counterfeiting solution that is cryptographically sound. The ESM-05 Anti-Counterfeiting Embedded Security Module (ESM) is a low gate count, low power identity module that incorporates a unique 256 bit identifier specific to the SoC. The unique identifier is bound to a RSA private key during a user-controlled configuration process to support a variety of identity provisioning schemes. The RSA private key may only be exported as a wrapped key blob using an internal NIST AES key wrap function. Wrapping permanently binds the RSA private key to the module that created it.

