概述
描述
Topics
The Trusted Secure IP Driver for RX Family V.1.24 has been released (Included spdx file).
This product enables secure updating of flash ROM embedded in MCUs and in preventing illicit firmware being booted up (secure booting). This driver controls AES, AES-GCM, AES-CMAC encryption and decryption and the generation of random numbers through high-speed hardware calculation by the Trusted Secure IP modules. As a result, this driver can help you to protect "Internet-of-Things" (IoT) embedded devices from viral infections and eavesdropping. Trusted Secure IP includes a full-function version "TSIP" and limited function version "TSIP-Lite". For information on Renesas IoT security solutions, please refer to Renesas IoT Security.
Components
- Trusted Secure IP Driver main body
- Trusted Secure IP Driver manual
- Sample code demonstrating application of the Trusted Secure IP Driver
- Sample code for confirming the way user keys are written
- Sample code for confirming the secure updating of firmware from USB memory or UART (In the case to use this sample code, please contact us).
- Sample code for confirming the way to use AES Cryptography
- Sample code for confirming the way to implement TLS
特性
- Cryptographic functions which provide advanced security can be embedded in mass-produced products at low cost
- High-speed execution of the AES, a world standard cryptographic algorithm
- Support for AES-GCM, which is frequently included in the required specifications of smart meters
- Functions for safely updating firmware
- Easily combined with other device drivers for RX, RE MCUs or RZ MPUs
- Learn More
发布信息
| Target Device Note1 | Product Name | Version/Release | Providing Method |
|---|---|---|---|
| RX23W RX231 RX26T RX65N, RX651 RX66N RX66T RX671 RX72M RX72N RX72T | Trusted Secure IP Driver for RX Family | Latest Ver.: V1.24 Release 00 Released: Apr. 20, 2026 | Download: RX family TSIP(Trusted Secure IP) Module Firmware Integration Technology Rev.1.24 - Sample Code (ZIP) |
| RE01 | Trusted Secure IP Driver for RE Family (Source code version) | Latest Ver.: V.1.01 Release 00 Released: Jul. 20, 2020 | Please contact Renesas sales division. |
| Trusted Secure IP Driver for RE Family (Binary version) | Latest Ver.: V.1.01 Release 00 Released: Nov. 6, 2020 | Please contact Renesas sales division. | |
| RZ/A2M | Trusted Secure IP Driver for RZ Family RZ/A2M Group | Latest Ver.: V3.00 Released: Jun. 30, 2020 | Contact us |
Note
- Some MCUs in the listed groups do not include a TSIP module. Refer to the User's Manual: Hardware for the given group to check the type names of the MCUs that have a TSIP module.
目标设备
文档
请登录后开启订阅
|
|
|
|
|---|---|---|
| 类型 | 文档标题 | 日期 |
| 应用说明 |
PDF
6.28 MB
日本語
The Trusted Secure IP Driver for the RX Family of 32-bit MCUs enables you to quickly and safely control functions, such as AES (128- or 256-bit keys), AES-GCM, AES-CMAC, random number generation, management of AES keys, secure updating of firmware, and secure booting.
|
|
| 工具新闻 - 注意事项 | PDF 146 KB 日本語 | |
| 应用说明 |
PDF
1.56 MB
日本語
AI 生成的摘要:
AES cryptography on RX family devices uses the Trusted Secure IP (TSIP) library to perform encryption and decryption with AES-128 in ECB and CBC modes. The implementation includes TSIP and BSP configuration, sample projects for RX65N and RX72N devices, and uses pre-wrapped user keys for demonstration. AES employs a substitution-permutation network (SPN) structure for efficient encryption, supporting 128-bit block size and key lengths of 128, 192, or 256 bits. ECB mode encrypts each plaintext block independently, while CBC mode XORs each plaintext block with the previous ciphertext block, using an initialization vector for the first block. Key management involves user keys, encrypted keys, wrapped keys, and hardware root keys, with key wrapping services provided by Renesas.
|
|
| 应用说明 |
PDF
1.02 MB
日本語
AI 生成的摘要:
TLS communication using the TSIP driver offers secure data transmission by preventing plaintext handling of keying information and accelerating encryption through hardware. It supports multiple TLS 1.2 cipher suites, including RSA and ECDHE algorithms. The TSIP driver provides comprehensive APIs for certificate management, key exchanges, signature verification, session key generation, and encryption/decryption processes. These APIs enable robust TLS implementation on RX Family devices, facilitating secure communication with hardware-accelerated cryptographic operations.
|
|
| 应用说明 | PDF 5.72 MB 日本語 | |
| 应用说明 |
PDF
3.80 MB
日本語
AI 生成的摘要:
The TSIP driver enables secure TLS communication by handling key information without exposing plaintext and accelerating encryption with hardware support. It supports multiple TLS 1.2 cipher suites, including RSA and ECDHE methods, though some ECDSA and AES-GCM features are not supported in the sample project. The sample project demonstrates integrating the TSIP driver with Azure RTOS and NetX Duo to establish MQTT communication via Microsoft Azure IoT Hub and Device Provisioning Service, using TLS for authentication. It confirms operation on RX65N and RX72N devices and provides detailed setup instructions, including key and certificate management, project building, and Azure portal configuration.
|
|
| 工具新闻 - 注意事项 | PDF 139 KB 日本語 | |
7 项目
|
||
设计和开发
样例程序
样例程序
筛选
|
||
|---|---|---|
| 类型 | 文档标题 | 日期 日期 |
| 示例代码 | RX family TSIP(Trusted Secure IP) Module Firmware Integration Technology Rev.1.24 - Sample Code
[Software=RX Driver Package|V1.50],[Toolchains=CC-RX|V3.07;GNURX|8.03.00.202405;IAR Compiler for RX|v.5.10]
ZIP
92.16 MB
应用:
工业, 消费电子产品
Compiler:
CC-RX, GNURX, ICCRX
Function:
Security
IDE:
e2 studio, IAR EWRX
|
|
| 示例代码 | RX Family TLS Implementation Example Using TSIP Driver (Azure RTOS) Rev.2.00 - Sample Code
[Software=RX Driver Package|V1.41;RX TSIP Firmware Integration Technology|V1.19],[Toolchains=CC-RX|V3.05.00]
ZIP
142.97 MB
应用:
工业, 消费电子产品
Compiler:
CC-RX
Function:
Application Example, OS, Security
IDE:
e2 studio
|
|
2 项目
|
||
新闻和博客
Additional Details
Functions
| Function | Algorithm (mode/method) | TSIP-Lite | TSIP | ||
|---|---|---|---|---|---|
| RX23W, RX231, RX26T, RX66T, RX72T, RE01 | RX65N, RX651, RX66N, RX671, RX72M, RX72N | RZ/A2M | |||
| Public-Key Cryptography | Signature generation and verification | RSA (RSASSA-PKCS1-v1_5) | — | lens (3072/4096 bit is only for signature verification) | lens |
| RSASSA-PSS | — | lens | — | ||
| RSA (DSA) | — | — | — | ||
| ECC (ECDSA) | — | lens | — | ||
| Encrypt/Decrypt | RSA (RSAES-PKCS1-v1_5) | — | lens (3072/4096 bit is only for encrypt) | lens | |
| Key pair generation | RSA 1024/2048 bit | — | lens | lens (2048 bit only) | |
| ECC P-192/224/256/384 | — | lens | — | ||
| Symmetric-Key Cryptography | AES-128/256 bit (ECB/CBC/GCM/CCM) | lens | lens | lens | |
| AES-128/256 bit (CTR) | lens | lens | — | ||
| Triple-DES 56/56x2/56x3 bit (ECB/CBC) | — | lens | — | ||
| ARC4 2048 bit | — | lens | — | ||
| Message authentication | AES-128/256 bit (CMAC) | lens | lens | lens | |
| Hash function | SHA-1, SHA-224, SHA-256 | — | lens (SHA-1, SHA-256) | lens (SHA-224, SHA-256) | |
| MD5 | — | lens | — | ||
| Random number generation | — | lens | lens | lens | |
| Key management function | AES 128/256 bit | lens | lens | lens | |
| RSA 1024/2048 bit | — | lens | lens (2048 bit only) | ||
| ECC P-192/224/256/384 | — | lens | — | ||
| Triple-DES 56/56x2/56x3 bit | — | lens | — | ||
| ARC4 2048 bit | — | lens | — | ||
| Key update function | AES 128/256 bit | lens | lens | In Development | |
| RSA 1024/2048 bit | — | lens (3072/4096 bit is only for public key) | In Development | ||
| ECC P-192/224/256/384 | — | lens | — | ||
| Triple-DES 56/56x2/56x3 bit | — | lens | — | ||
| ARC4 2048 bit | — | lens | — | ||
| SSL/TLS cooperation function | TLS1.2 compliant Supporting cipher suites: TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | — | lens | lens (TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256 only) | |
| TLS1.3 compliant Supporting cipher suites: TLS_AES_128_GCM_SHA256 TLS_AES_128_CCM_SHA256 | — | lens | — | ||
| Key agreement | ECDH 512 bit, DH 2048 bit | — | lens | — | |
| Key Wrap | AES 128 bit/256 bit | lens | lens | — | |
| Secure booting | — | lens | lens | lens | |
| Secure updating of firmware | — | lens | lens | In Development | |
lens Available | — Unavailable
Maximum key length for each algorithm.
- - AES: 256 bit
- - RSA: 4096 bit
- - DES: 56 bit
- - Triple-DES: 168 bit
- - ARC4: 2048 bit
- - DH: 2048 bit
- - ECDH: 512 bit
- - ECDSA: 256 bit
- - DSA 2048 bit / ECDSA 512 bit (Cryptographic algorithm for authentication): Not supported
Operating Environment
| MCU | RX Family | RE Family | RZ Family | |
|---|---|---|---|---|
| IDE | IAR Embedded Workbench for ARM version 8.32.1 or later | e2 studio V.7 or later | e2 studio V.7.6.0 | |
| C Compiler | C/C++ Compiler Package for RX Family V3.03.00 or later | IAR C/C++ Compiler for ARM version 8.32.1 or later | GCC ARM Embedded Version 6.3.1.20170620 | GCC ARM Embedded Toolchain (6-2017-q2) |
| Debugger |
| Segger J-Link | Segger J-Link | |
| Evaluation board |
|
(Please contact Renesas sales division.) | RZ/A2M Evaluation Board Kit (Contact us about details) | |
Purpose
- Cryptographic communications among CPUs in equipment at sites or within equipment
- Secure updating of firmware for embedded devices in general
Obtaining the product
We will provide the product to customers who will be adopting or plan to adopt a Renesas microcontroller. Please contact your local Renesas Electronics sales office or distributor.
支持
知识库
- RX系列: AES加密/解密的可用资源及相应许可
... 准，并通过了NIST*3 FIPS*4 140-2 Level 3 CMVP*5认证。 用户可以查阅RX Family Trusted Secure IP Driver，了解其功能以及如何使用提供的API进行AES（128位/ ...
