Analog Devices Inc. SE051C2HQ1/Z01XDZ

Overview

SE051C2HQ1/Z01XDZ from NXP Semiconductors is a Common Criteria EAL 6+ certified secure element IC designed as an I²C-connected auxiliary security device for IoT host controllers. It supports SCP03-secured communication, RSA/ECC cryptographic acceleration, and embedded Java Card OS with SE05X_C applet version 07.02. It enables root-of-trust functions in edge devices such as smart meters and industrial gateways.

For engineers reviewing the SE051C2HQ1/Z01XDZ datasheet, SE051C2HQ1/Z01XDZ pinout, SE051C2HQ1/Z01XDZ application, or SE051C2HQ1/Z01XDZ equivalent, key selection considerations include SCP03 binding capability, SE05X_C applet compatibility, I²C target mode operation, memory-constrained middleware support (Nano/Mini packages), and OEF ID A8FA for platform-specific key configuration.

Technical Context

The SE051C2HQ1/Z01XDZ operates exclusively as an I²C target device when interfacing with host MCUs/MPUs, requiring no external clock or reset circuitry. Its cryptographic subsystem implements FIPS 140-2 Level 3 validated algorithms including AES-128, SHA-256, ECDSA P-256/P-384, and RSA-2048/3072.

It embeds the SE05X_C applet (v07.02) with Platform SCP enabled by default, supporting static SCP03 keys (Key-ENC/MAC/DEK) and dynamic session key derivation. The device uses a dedicated Java Card OS Manager compliant with ISO/IEC 7816-4 APDUs for secure channel establishment.

Key Specifications

Availability

SE051C2HQ1/Z01XDZ is available at Aetrix Electronics and suitable for industrial gateways, smart energy meters, and connected medical devices requiring stable component supply, long-term lifecycle assurance, and traceable sourcing of certified secure elements.

Supply support for SE051C2HQ1/Z01XDZ includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.

Manufacturer

NXP Semiconductors is a global semiconductor leader specializing in secure connectivity solutions for automotive, industrial, and IoT applications.

The EdgeLock SE05x product line delivers plug-and-trust secure elements engineered specifically for scalable, standards-compliant IoT security integration - enabling rapid root-of-trust deployment without custom crypto development.

FAQ

What is the primary interface and operational role of the SE051C2HQ1/Z01XDZ in a system?

The SE051C2HQ1/Z01XDZ functions exclusively as an I²C target device, communicating with a host controller (MCU/MPU) acting as the I²C controller. It does not operate in controller mode or support SPI/UART. Its role is to offload cryptographic operations, store secrets securely, and enforce access policies via its Java Card OS - all while maintaining strict isolation from the host's main processing domain. This architecture ensures that even if the host is compromised, the SE051C2HQ1/Z01XDZ retains control over sensitive keys and operations.

Does the SE051C2HQ1/Z01XDZ support Secure Channel Protocol 03 (SCP03), and how is it configured?

Yes, the SE051C2HQ1/Z01XDZ natively supports GlobalPlatform SCP03 for mutual authentication and encrypted I²C communication. Configuration is handled through the Plug & Trust Middleware using CMake options: PTMW_SCP = SCP03_SSS and SSSFTR_SE05X_RSA = disabled (since RSA is optional). The OEF ID A8FA maps to predefined SCP03 key sets in ex_sss_tp_scp03_keys.h, and binding requires injecting matching Key-ENC/MAC/DEK into both host and SE051C2HQ1/Z01XDZ during manufacturing or provisioning.

Which applet version and feature set is preloaded on the SE051C2HQ1/Z01XDZ?

The SE051C2HQ1/Z01XDZ ships with the SE05X_C applet version 07.02, which includes full SCP03 support, ECC-based key agreement (ECDH), certificate handling, and secure key injection APIs. It does not include RSA acceleration by default (SSSFTR_SE05X_RSA disabled), optimizing memory usage for constrained hosts. The applet is FIPS 140-2 Level 3 validated and aligned with Common Criteria EAL 6+ requirements.

Can the SE051C2HQ1/Z01XDZ be used with the Plug & Trust Nano middleware package?

Yes, the SE051C2HQ1/Z01XDZ is fully supported by the Plug & Trust Nano package, which consumes only 1 KB RAM for SCP03 communication over I²C. This makes it suitable for deeply embedded microcontrollers with limited resources, such as Cortex-M0+/M3 devices running bare-metal or RTOS environments. Nano provides minimal but complete SSS API coverage for key generation, signing, and attestation - without dependencies on OpenSSL or mbedTLS.

What development hardware is compatible with the SE051C2HQ1/Z01XDZ for evaluation?

The SE051C2HQ1/Z01XDZ is validated with the OM-SE051ARD Arduino-compatible development kit (12NC 935399187598), which exposes I²C signals via standard headers. It also integrates with FRDM-K64F, MIMXRT1060-EVK, LPC55S69-EVK, and MCIMX8M-EVK boards using the Full Multiplatform Plug & Trust Middleware. For Raspberry Pi, use the OM-SE05xRPI adapter board (935398642598) or direct wiring per AN12570.