Meaning
Cybersecurity evaluation frameworks define rigorous physical and logical protection criteria for root-of-trust subsystems inside connected microcontrollers. Attaining PSA Certified Level 3 confirms that a system-on-chip incorporates dedicated security hardware capable of resisting physical tampering and side-channel attacks. Silicon architecture separates secure cryptoprocessors from general-purpose application cores.
The evaluation boundary covers internal secure enclave hardware and secure boot code while excluding external board-level components.
Hardware Isolation
Dedicated security enclaves isolate master cryptographic keys within physically protected silicon regions. Hardware memory protection units restrict general application code from reading secure RAM locations. Internal buses block unauthorized access requests originating from unverified peripheral controllers.
Memory bus encryption blocks probe attacks.
Threat Protection
Advanced silicon layout techniques mitigate side-channel voltage monitoring and differential power analysis attacks. On-chip glitch detectors trigger immediate hardware resets if supply voltages or clock frequencies deviate from safe operating parameters. Cryptographic engines execute masking algorithms to hide internal state changes from external electromagnetic probes.
Tamper circuits erase cryptographic keys upon physical intrusion detection.
Certification Audit
Independent security testing laboratories execute penetration attacks against candidate silicon samples. Evaluation teams perform invasive chip probing and fault injection attacks during multi-week laboratory testing cycles. Certification bodies award PSA Certified Level 3 status only after silicon passes all physical and logical security assessment modules.