NXP Semiconductors NTAG® X DNA Secure Connected NFC Tag
NXP Semiconductors NTAG® X DNA Secure Connected NFC Tag is designed for IoT platforms, electronic accessories, and consumable devices. These applications include home electronic devices, mobile accessories, and medical supplies.
The NXP NTAG X DNA Secure Connected NFC Tag features ECC key pairs, which the IC can generate to ensure that private keys are never exposed outside the IC. Furthermore, the NFC Tag conducts cryptographic operations for security-critical communication and control functions.
The NTAG X DNA provides Common Criteria EAL 6+ security certification with AVA_VAN.5 on the product level and supports a generic Crypto API supplying AES, ECDSA, ECDH, SHA, HMAC, and HKDF cryptographic functionality. Asymmetric cryptography allows support for 256-bit ECC over the NIST P-256 and brainpoolP256r1 curves. Symmetric cryptography attributes support both AES-128 and AES-256. Also, it facilitates PKI-based mutual authentication, including certificate handling. The CC security certification guarantees that the IC security measures and protection mechanisms have been evaluated against realistic non-invasive and invasive attack scenarios.
The NTAG X DNA hosts an I2C contact interface with two GPIOs and an ISO 14443 contactless interface. The device delivers a low-power design and consumes only 5μA at Halt mode when an external VDD is equipped.
Features
- ECC key generation on the IC, and provisioning item-level certificate(s) in NXP, or in the field
- The following cryptographic primitives are supported: AES-128/256 (ECB, CBC, CMAC, CCM, GCM), ECDSA, and ECDH over NIST P-256 and brainpoolP256r1, SHA-256/384, HMAC, and HKDF
- Allows the support of advanced cryptographic protocols such as SIGMA-I, TLS1.3, and Matter
- SUN (Secure Unique NFC) message with AES encryption and ECDSA signature or AES CMAC
- Non-reversible monotonic counter as the usage counter
- Configurable silent mode, which does not interfere with the standard ISO 14443 communication
- Support for two interfaces - ISO 14443 and I2C, and the possibility to change the communication interface without rebooting
- Delivery of the list of UID and certificates at shipping from NXP
- NFC tag compliant with NFC Forum specifications
- Low Hmin enabling larger operating volumes (depending on power provided by the PCD and antenna geometry)
- Interface compliant with ISO/IEC 14443-2/3A/4 with data rates 106/212/424/848kbit/s, and Very High Bit Rate (VHBR) 1.7Mbit/s and
- 3.4Mbit/s - PICC to PCD only
- I2C target operates at 100kHz (standard mode), 400kHz (fast mode), or 1MHz (Fast-mode Plus)
- Two configurable GPIOs; 1 GPIO can be used for power downstream - up to 10mW for batteryless applications
- 1V operation with 1.5V battery
- Small footprint on PCB with WLCSP16
Applications
- Secure key(s) and certificate(s) storage
- PKI (Public Key Infrastructure) based authentication and communication
- Device only, device-to-device, and device-to-cloud authentication
- Secure connection for consumer devices, industrial machines, and medical devices
- Battery passport and/or digital product passport
- Device to meet increasing cybersecurity requirements
Videos
Block Diagram
Configurations
