Embedded World: Secure SPI flash from Winbond meets Common Criteria EAL2

Called W77Q, the series supports secure boot, root-of-trust, encrypted data-storage, encrypted data-transfer “and resilience, providing protection for operations such as over-the-air updates and device authentication”, according to the firm. “Secure code updates, including over-the-air updates, are via an end-to-end secure channel between an update authority and the W77Q, even when the host processor or SoC has been compromised.”

The whole series feature single-dual-quad-QPI SPI (serial peripheral interface), and the first W77Q part, sampling now, has 32Mbit of flash.

According to Winbond, the memories are designed to cover the whole range of assurance levels mandated by the European Cybersecurity Act, and are for use in consumer and industrial devices which need the security functions required for compliance with the Substantial and Basic assurance levels specified in the Act. W77Q supports conformance to the Common Criteria EAL2, SESIP and Arm Platform Security Architecture (PSA) security specifications.

Another series, W75F, is certified for Common Criteria EAL5+, which means it is suitable for use in payment and communications devices, and in applications requiring the High assurance levels specified in the Cybersecurity Act.

“The W77Q is a game-changer product, a follow-on to the existing W75F which offers the industry’s strongest security in an SPI flash memory, suitable for the most sensitive financial and communications applications,” said Winbond marketing director Hung-Wei Chen.” Now, with W77Q, Winbond is meeting the need of customers to protect and authenticate any kind of smart, connected device used at home or in the factory.”

W77Q main security features:

• Hardware-based root-of-trust engine
• TCG DICE-like device attestation
• Cryptographically secured write protection
• Secure code updates with roll-back protection
• Secure boot from flash
• Authenticated watchdog timer
• Secure interface:
  End-to-end encrypted and authenticated data transfer
  Replay protection monotonic counter (RPMC)
• Incremental Security
  Fail-safe (in-field) configuration updates
  Secure symmetric key management
• Secure unique device ID

General features:

• 66MHz operating frequency at double transfer rate – 133MHz at single transfer rate
• 20 years’ data retention
• 100,000 program-erase cycles
• -40°C to 105°C operation