EM2420-STR Ember, EM2420-STR Datasheet - Page 42

• Manufacturer Part Number: EM2420-STR
• Description: IC RF TXRX ZIGBEE 2.4GHZ 48-QLP
• Manufacturer: Ember

Specifications of EM2420-STR

• Mfg Application Notes: EM2420
• Frequency: 2.4GHz
• Data Rate - Maximum: 250kbps
• Modulation Or Protocol: 802.15.4
• Applications: ZigBee™
• Power - Output: -3dBm
• Sensitivity: -94dBm
• Voltage - Supply: 2.1 V ~ 3.6 V
• Current - Receiving: 19.7mA
• Current - Transmitting: 17.4mA
• Data Interface: PCB, Surface Mount
• Antenna Connector: PCB, Surface Mount
• Operating Temperature: -40°C ~ 85°C
• Package / Case: 48-QLP
• Lead Free Status / RoHS Status: Contains lead / RoHS non-compliant
• Memory Size: -

MAC Security Operations (Encryption and Authentication)
The
802.15.4 MAC security operations, which
are exposed in the EmberNet API. This
includes counter mode (CTR) encryption /
decryption, CBC-MAC authentication and
CCM encryption + authentication. All
security operations are based on AES
encryption [2] using 128 bit keys. Security
operations
transmit and receive FIFOs on a frame
basis.
The
encryption, in which one 128 bit plaintext
is encrypted to a 128 bit ciphertext.
The
command strobes are used to start
security operations in the
be described in the following sections. The
ENC_BUSY status bit (see Table 5) may be
used to monitor when a security operation
has been completed. Security command
strobes issued while the security engine is
busy will be ignored, and the ongoing
operation will be completed.
Table 6 on page 27 shows the
RAM memory map, including the security
related data located from addresses
0x100 through 0x15F. RAM access (see
the RAM access section on page 25) is
used to write or read the keys, nonces and
stand-alone buffer. All security related
data is stored little-endian, i.e., the least
significant byte is transferred first over the
SPI interface during RAM read or write
operations.
For a complete description of IEEE
802.15.4 MAC security operations, please
refer to [1].
Keys
All security operations are based on 128
bit keys. The
storage space for two individual keys
(KEY0 and KEY1). Transmit, receive and
stand-alone encryption may select one of
these
SEC_TXKEYSEL,
SEC_SAKEYSEL control bits (SECCTRL0).
Ember Part Number: 120-0049-000D
EM2420
EM2420
SAES,
two
also includes stand-alone AES
are
keys
features hardware IEEE
EM2420
STXENC
performed
SEC_RXKEYSEL
individually
RAM space has
and
EM2420
within
SRXDEC
in
EM2420
as will
and
EM2420 Datasheet
the
the
As can be seen from Table 6 on page 27,
KEY0 is located from address 0x100 and
KEY1 from address 0x130.
A way of establishing the keys used for
encryption and authentication must be
decided for each particular application.
IEEE 802.15.4 does not define how this is
done; it is left to the higher layer of the
protocol.
ZigBee
Cryptography (ECC) based approach to
establish keys. For PC based solutions,
more processor intensive solutions such
as Diffie-Hellman may be chosen. Some
applications
programmed
keyless entry where the key and lock are
delivered in pairs. A push-button approach
for loading keys may also be selected.
Nonce / counter
The receive and transmit nonces used for
encryption / decryption are located in RAM
from
respectively. They are both 16 bytes.
The nonce must be correctly initialized
before receive or transmit CTR or CCM
operations are started. The format of the
nonce is shown in Table 7. The block
counter must be set to 1 for compliance
with [1]. The key sequence counter is
controlled by a layer above the MAC layer.
The frame counter must be increased for
each new frame by the MAC layer. The
source address is the 64 bit IEEE address.
1 byte
Flags
The block counter bytes are not updated
in RAM, only in a local copy that is
reloaded for each new in-line security
operation. I.e., the block counter part of
the nonce does not need to be rewritten.
The
0x0001 for compliance with [1].
EM2420
Table 7. IEEE 802.15.4 Nonce [1]
addresses
8 bytes
Source
Address
uses
block counter should be set to
keys,
may
4 bytes
Frame
Counter
an
0x110
e.g.,
also
EM2420
Elliptic
1 byte
Key
Sequence
Counter
and
for
use
Page 42 of 84
remote
0x140
Curve
2 bytes
Block
Counter
pre-