Arm Cortex- M23 CPU for highly sensitive data protection scenarios

Nuvoton_17102025.png

Enhanced security and compact footprint for server, IoT and edge

NuMicro® M2354 is an Arm® TrustZone® microcontroller based on the Armv8-M architecture and powered by the Arm® Cortex®-M23 CPU, designed to enhance IoT security. It is suitable for long-term confidentiality requirements and highly sensitive data protection scenarios.

The M2354 operates at frequencies up to 96 MHz, offers a wide operating voltage range of 1.7V to 3.6V, and a broad operating temperature range of -40°C to +105°C. The power consumption is 89.3 μA/MHz in LDO mode and 39.6 μA/MHz in DC-DC mode. The Standby Power-down mode consumes less than 2 µA, and the Deep Power-down mode without VBAT consumes less than 0.1 µA, effectively extending the device's battery life and meeting the needs of long-term IoT operation.

For Secure FOTA, the M2354 has built-in dual-bank Flash Memory of up to 1024 KB and 256 KB of SRAM. In addition to supporting eXecute-Only-Memory (XOM) to prevent code theft, it also integrates a cryptographic hardware accelerator that supports FIPS PUB 197/180/180-2/180-4 and NIST SP 800-38A, as well as a hardware key store to protect against side-channel and fault injection attacks. In terms of secure boot mechanism, the upgraded M2354 supports the Root of Trust architecture based on DICE, implemented in Mask ROM, and supports ECDSA P-521. This feature automatically generates a unique device identity and establishes a chain of trust during boot, effectively verifying firmware version and preventing firmware rollback and tampering attacks. Furthermore, M2354 is compliant with PSA Level 3 and SESIP Level 3 security certifications, which meet the demands of the EU's Cyber Resilience Act (CRA).

Security Features

Model Secure Boot TrustZone Flash Protection Crypto Accelerators PRNG TRNG Key Store Tamper Controller NuSMP 2.0
XOM Two-level Lock DES/3DES AES SHA HMAC ECC RSA Tamper Pin Volt. Sensor Clk. Monitor DPM PLM FVC
M2354LJFAE
M2354SJFAE
M2354KJFAE
(*) ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ●
M2354LJFBE
M2354SJFBE
M2354KJFBE
M2354CJFAE
(**) With DICE ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ●

(*) Use SHA-256 and ECDSA P-256 to validate data in APROM and LDROM

(**) Use SHA-512 and ECDSA P-521