STMicroelectronics STSAFA110S8SPL02

Overview

STSAFA110S8SPL02 from STMicroelectronics is a CC EAL5+ AVA_VAN5 certified secure element IC implementing asymmetric (ECC NIST/Brainpool 256/384-bit, ECDSA, ECDH) and symmetric (AES-based secure channel, up to 16 keys) cryptography for authentication, TLS handshake offload, firmware signature verification, and secure counter-based usage monitoring in IoT peripherals and USB-C/Qi chargers. It operates from 1.62 V to 5.5 V across −40 to 105 °C.

For engineers reviewing the STSAFA110S8SPL02 datasheet, STSAFA110S8SPL02 pinout, STSAFA110S8SPL02 application, or STSAFA110S8SPL02 equivalent, key selection considerations include I²C Fast-mode (400 kbps) interface compliance, on-chip key pair generation, secure boot support via ECDSA/SHA-256 signature verification, and dual-package availability (SO8N and UFDFPN8) with ECOPACK® compliance.

Technical Context

The STSAFA110S8SPL02 integrates a hardened secure MCU running a dedicated STSAFE-A110 kernel, enabling authenticated host pairing via AES-encrypted secure channels and local envelope wrapping/unwrapping using device-specific keys. Its cryptographic engine supports both static and ephemeral ECDH key establishment and full TLS 1.2 client/server offload including secure random generation, ECDSA signing, and public-key verification.

It implements hardware-level protections against side-channel attacks, fault injection, and environmental tampering, with active shield monitoring and unique per-die serial number. Memory partitioning enforces configurable read/write access rights over its 6 Kbytes of EEPROM - retaining data for 30 years at 25 °C with 500,000 program/erase cycles.

Key Specifications

Pinout & Package

STSAFA110S8SPL02 is available in two ECOPACK®-compliant packages: SO8N (4 × 5 mm) and UFDFPN8 (2 × 3 mm). Both are 8-lead surface-mount packages with identical pin functions and I²C-compatible signal mapping.

Key Features

Applications

Equivalent & Alternatives

The following parts are listed as comparable options for similar secure element authentication applications.

Compared with STSAFA110S8SPL02, the STSAFE-A100 offers reduced cryptographic agility and no LPWAN support, while the SE050 provides broader protocol coverage at the expense of higher BOM cost and integration complexity - STSAFA110S8SPL02 balances certified security, I²C simplicity, and targeted IoT/peripheral use cases.

Availability

STSAFA110S8SPL02 is available at Aetrix Electronics and suitable for USB-C authentication, Qi wireless charging validation, industrial sensor node security, and smart home consumables requiring stable component supply with long-term industrial temperature support and CC EAL5+ certification.

Supply support for STSAFA110S8SPL02 includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.

Manufacturer

STMicroelectronics is a global semiconductor leader headquartered in Geneva, Switzerland, designing and manufacturing microcontrollers, analog ICs, power management devices, and secure elements for industrial, automotive, and consumer markets.

The STSAFE-A series targets peripheral and IoT device authentication, delivering turnkey secure element solutions with pre-integrated crypto kernels, certified protection mechanisms, and host integration code for rapid deployment on STM32 and other MCUs.

FAQ

What is the primary security certification level of STSAFA110S8SPL02?

STSAFA110S8SPL02 is certified to Common Criteria EAL5+ with AVA_VAN5 vulnerability assessment, confirming robust resistance to physical probing, fault injection, side-channel analysis, and logical attacks. This certification covers the entire silicon die, including the secure operating system kernel and cryptographic accelerators - not just software layers.

Does STSAFA110S8SPL02 support both I²C Fast-mode and standard-mode speeds?

STSAFA110S8SPL02 supports I²C Fast-mode operation at up to 400 kbps with true open-drain SDA/SCL pins and 7-bit addressing. It does not support Standard-mode (100 kbps) as a separate configuration - Fast-mode is its native and only operational speed grade, ensuring consistent timing for secure command execution.

Can STSAFA110S8SPL02 generate and store its own ECC key pairs internally?

Yes, STSAFA110S8SPL02 performs on-chip generation of ECC key pairs (NIST P-256/P-384 or Brainpool 256/384) using a hardware TRNG. Private keys remain isolated within secure memory and never leave the device - only corresponding public keys or signed attestations are exportable for authentication or TLS handshake.

How does STSAFA110S8SPL02 handle secure firmware updates for the host system?

STSAFA110S8SPL02 verifies ECDSA signatures of firmware images using SHA-256 or SHA-384 digests provided by the host. It does not store or execute firmware itself - instead, it acts as a root-of-trust verifier, returning pass/fail status to the host processor, which then proceeds with update only upon successful signature validation.