The A5000 is a ready-to-use secure IoT authenticator. It provides a root of trust at the IC
level and it gives an IoT authentication system state-of-the-art security capability right out
of the box.
A5000 allows for securely storing and provisioning credentials and performing
cryptographic operations for security critical communication and authentication functions.
A5000 is versatile in IoT security use cases such as secure connection to public/private
clouds, device-to-device authentication or counterfeit protection
A5000 has an independent Common Criteria EAL 6+ security certification up to OS level
and supports ECC asymmetric cryptographic and AES/3DES symmetric algorithms. The
latest security measures protect the IC even against sophisticated non-invasive and
invasive attack scenarios.
The A5000 is a turnkey solution that comes with an authentication application optimized
for authentication security use cases pre-installed. This is complemented by an
authentication tailored product support package, enabling fast time to market & easy
design-in with Plug & Trust middleware for host applications, easy to use development
kits, reference designs, and documentation for product evaluation.
To implement inclusive language, the terms "master/slave" has been replaced by
"controller/target", following the recommendation of MIPI.

2.1 Key benefits
• Plug & Trust for fast and easy design with dedicated product support package for
authentication use cases
• Easy integration with different MCU & MPU platforms and OSs (Linux, RTOS,
Windows, Android, etc.)
• Turnkey solution ideal for many authentication use cases without the need to write
security code
• Secure credential injection for proof of origin check
• Anti-counterfeit solution
• Secure, zero-touch connectivity to public & private clouds
• Real end-to-end security in authentication system from smart metering to smart home
appliances
• Ready-to-use example code for each of the key use cases such as device-to-device
authentication and originality check
2.2 Key features
The A5000 provides a secure and efficient protection for authentication and anticounterfeit
use cases. The efficiency of the security measures is proven by a Common
Criteria EAL6+ certification.
The A5000 operates fully autonomously based on an authenticaton software ready to
be used. The product comes with a dedicated authentication application. Direct memory
access is possible by the fixed functionalities of the NXP Authentication application only.
With that, the content from the memory is fully isolated from the host system.
• Built on NXP Integral Security Architecture 3.0 ™
• CC EAL 6+ certified HW and OS
• Effective protection against advanced attacks, including Power Analysis and Fault
Attacks of various kinds
• Multiple logical and physical protection layers, including metal shielding, end-to-end
encryption, memory encryption, tamper detection
• Support for ECC NIST asymmetric cryptography algorithms,
• Support for AES and DES symmetric cryptographic algorithms for encryption and
decryption
• Support for AES Modes: CBC, ECB,CTR,GCM,CCM
• HMAC, CMAC, GMAC, SHA-256/384 operations
• HKDF key derivation function
• Small and very thin footprint HX2QFN20 package (3 × 3 mm) with max 0.33 mm height
• Extended temperature range (-40 °C to +105 °C)
• Standard physical interface I2C Target (Fast mode, up to 1 Mbit/s)
• Secured user flash memory of 8kB for secure data or key storage
• Support for SCP03 protocol (bus encryption and encrypted credential injection) to
securely bind the host with the secure authenticator
• TRNG compliant to NIST SP800-90B
• DRBG compliant to NIST SP800-90A
• Support for Automatic detection of the I2C T=1 protocol implementation based on the
initial message prologue. Supported protocols:
– NXP SE05x T=1 Over I2C Specification. See [1].
– APDU Transport over SPI/I2C v1.0 | GPC_SPE_172. See [6].
• Matter Ready: A5000 provides the necessary cryptographic functions to support the
upcoming Matter standard for connecting smart home devices.