This repository contains a target-agnostic Software Framework for the OPTIGA™ Trust X security chip. It is a basis for other application notes. Be aware that this software comes without any security claims and shall be used for evaluation purpose.

The OPTIGA™ Trust X is a security solution based on a secure microntroller. Each device is shipped with a unique elliptic-curve keypair and a corresponding X.509 certificate. OPTIGA™ Trust X enables easy integration into existing PKI infrastructure.

• High-end security controller
• Turnkey solution
• One-way authentication using ECDSA
• Mutual authentication using DTLS client (IETF standard RFC 6347)
• Secure communication using DTLS
• Compliant with the USB Type-C™ Authentication standard
• I2C interface
• Up to 10 KB user memory
• Cryptographic support: ECC256, AES128 (via on-chip DTLS client), SHA-256, TRNG, DRNG
• PG-USON-10-2 package (3 x 3 mm)
• Standard & extended temperature ranges
• Full system integration support
• Common Criteria Certified EAL6+ (high) hardware
• Cryptographic Tool Box based on ECC NIST P256, P384 and SHA256 (sign, verify, key generation, ECDH, session key derivation)
• Lifetime for Industrial Automation and Infrastructure is 20 years and 15 years for other Application Profiles

• Software Framework overview
• Evaluation and developement kits
• Examples
• Documentation

1. See Trust X Crypt API and Trust X Util API to know more about optiga_crypt and optiga_util modules
2. Information about the OPTIGA™ Trust X Command Library can be found in the Solution Reference Manual v1.35 In the same document you can find explanation of all Object IDs (OIDs) available for users as well as detailed technical explanation for all features and envisioned use cases.
3. Infineon I²C Protocol implementation details can be found here
4. Platform Abstraction Layer (PAL) overview and Porting Guide are presented in the Wiki

For more information please refer to the Wiki page of this project

• OPTIGA™ Trust X evaluation and demonstration kit
• OPTIGA™ Trust X Shield2Go

1. Get started guide
2. On-Chip DTLS example
3. Off-Chip TLS example (mbedTLS)
4. AWS FreeRTOS example
5. Secure Firmware Update and Secure Boot
6. Arduino library
7. Personalize OPTIGA™ Trust
8. OpenSSL Engine and Command Line Interface (for RPi3)
9. Python package
10. I2C Utilities
11. OPTIGA Trust X Technical Training

• Initialisation hints (Wiki)

• Porting guide (Wiki)

• Crypto performance (Wiki)

• Error Codes (Wiki)

• Metadata and Access Conditions (Wiki)

• On‐chip vs off-chip DTLS Protocol (Wiki)

• User API

  • Crypt API (Wiki)
  • Util API (Wiki)

• Hardware-Security: "Einfach (und) Sicher" in German, Slides in English

For high level description and some important excerpts from the documentation please refer to Wiki page

Other downloadable PDF documents can be found below:

1. OPTIGA™ Trust X Datasheet v2.6 (PDF)
2. OPTIGA™ Solution Reference Manual v1.35 (PDF)
3. OPTIGA™ Keys and Certificates v1.2 (PDF)
4. Infineon I2C protocol specification v1.65 (PDF)

If you are planning to integrate OPTIGA™ Trust X in your PCB design have a look at the recommendations found here.

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

This project is licensed under the MIT License - see the LICENSE file for details

Be aware that this software comes without any security claims and shall be used for evaluation purpose.