Certicom Security
for ZigBee Smart Energy

Compact, Efficient Security for Low Power Wireless Mesh Networks

Certicom Security for ZigBee Smart Energy is a cross-platform cryptographic module which supports the Smart Energy application
security profile for ZigBee devices. Elliptic Curve Cryptography (ECC) strength and efficiency provides an enhanced level of security
to resource-constrained wireless mesh networks.

CompaCt, EffiCiEnt SECurity

CErtiCom Solution

Certicom’s ZigBee implementations of ECDSA andThe solution to the key distribution problem for ad hoc wireless

ECMQV offer the same highly efficient digital signature and key

sensor networks is a Public Key Infrastructure using Elliptic Curveagreement schemes selected by the NSA, with software optimized for

Cryptography (ECC) based Implicit Certificates. Implicit

performance as well as minimal code footprint.

Certificates bring strong security to the resource-constrained
ZigBee environment. Requiring all devices to be authenticatedElliptic Curve Cryptography (ECC) based Qu-Vanstone “Implicitwith digital certificates allows metering companies to takeCertificates” bring strong security to the resource-constrained ZigBee

advantage of mass-produced ZigBee Smart Metering devices

environment without the overhead of bulky X.509 certificates. Implicit

with built-in strong cryptographic identities.

digital certificates allow metering companies to take advantage
of mass-produced ZigBee Smart Metering devices with built-in
cryptographic identities.
ECMQV and ECDSA can be utilized in a variety of resource
constrained applications which may benefit from mutual
authentication yet resource constraints prohibit the use of ordinary
PKI technology.

SmallEr and faStEr
Optimized for constrained platforms, the ZigBee suite of algorithms
can be implemented in as little code space as 10 K of ROM. Workingwith Certicom professional services implementations can be quickly
tuned to support a wide variety of (RAM, ROM and stack)configurations. The ECC enabled implementations are ideal forresidential and commercial energy management systems that are
low bandwidth and require maximum battery life.

Certicom Security for ZigBee Smart EnergyFeatures
554

Certicom Components
1. Security Builder Crypto & MCE Toolkits

CERTIFICATE

Certicom
Device CAOn-site certificate
injection

2. Certificate Request Tool
3. Certificate Validation Tool

Implicit Certificate

2Certicom KeyInject

4. Certicom KeyInject
5. Certicom Device CA and Implicit Certificates

Establish initial
key pairs

1

CERTIFICATE

Implicit Certificate
added to device

3

CERTIFICATE

Implicit Certificate

72°

Manufacturer

Utility
Operations

Implicit Certificate
MESH/ZIGBEEENABLED HOMEZIGBEESMART
ENERGYAES-MMO-

Key Agreement/ Key Transport

ECMQV

Digital Signatures

ECDSA

Implicit Certificate handling

ECQV
10 – 20 K

Code Ram Usage<1 K

Platform Support

8051

COMMERCIAL
BUILDING
AUTOMATION

INDUSTRIAL
PLANT
MONITORING

Certicom
Security

APPLICATION INTERFACEImplementations:
Code Size Range

HOME
AUTOMATION

Arm 7/ARM 9EM250 and EM260

SOFTWARE

Asymmetric Encryption

APPLICATIONSCNETWORK LAYER[STAR / CLUSTER / MESH]

MAC LAYER
MAC LAYER
PHY LAYERLinux x86

2.4 GHz • 868 MHz • 915 MHz

MSP 430

MICROPROCESSOR!
SILICONHash Functions

8 and 16-bit

IEEE 802.15.4

Programming Language

ZIGBEE ALLIANCE

Environment

AND OTHER HW BLOCKS

Windows x86
M16C

Security Builder MCE for Zigbee Smart Energy

About Certicom
Founded in 1985 with a long-term focus on Elliptic Curve Cryptography, Certicom has been awarded over 500 patents. As a leader inapplied cryptography and key management, Certicom provides managed PKI, key management and provisioning technology that helps toprotect customers’ device firmware, applications, and long-lived assets. Certicom is a critical element of the Blackberry cybersecurity
portfolio deploying the first and best in class end-to-end security solutions used in preventing product counterfeiting, re-manufacturing,
CorporateJapanand rogue network access. Blackberry Certicom's secure key provisioning, code signingandHeadquarters
identity management
solutions are fieldResearch In Motion Jan Ltd.
5520 Explorer Drive, 4th Floor
proven to protect next-generation connected cars, critical infrastructure and IoT deployments.
Scotts Valley, CA 95066
USA

Corporate Headquarters
4701 Tahoe Blvd., Building A

Mississauga, ON L4W 5L1Canada

Nippon Brunswick, Building 7F
5-27-7 Sendagaya,Shibuya-ku,
Tokyo 151-0051,Sweden
Japan

Corporate Headquarters
United Kingdom Tel: 1.905.507.4220
Japan
1.831.438.4100
Mississauga,Tel:ON L4W
0B5 Canada
Tel: +1.905.507.4220
Tel: +44 1344 624970Toll Free: 1.800.561.6100
Research In Motion JapanTel:Ltd. 03 6367Tel:3567+46 8 747 17 41
Fax: 1.831.438.4111
Tel: 1.905.507.4220
sales@certicom.com
Toll Free: 1.800.561.6100(NA only)
Tel: 03 6367 3567
Toll Free: 1.800.561.6100(NA only)
Sales:
1.800.561.6100(NA only)
info@certicom.com
sales@certicom.com

info@certicom.com

˕ˡ˟ˠ˧NsǋǼÞOŸŎNŸǋƼʳNsǋǼÞOŸŎʰNsǋǼÞOŸŎōǢʰǣǣsǼNŸŘǼǋŸĶNŸǋsʰNsǋǼÞOŸŎǢsOȖǋÞǼɴǋOÌÞǼsOǼȖǋsʰNsǋǼÞOŸŎNŸ_sǢÞ¶ŘʰNsǋǼÞOŸŎħsɴÝŘĠsOǼʰNÌÞƼOǼÞɚǼsʰ^ÞsōɮʰǢsOȖǋÞǼɴDȖÞĶ_sǋʰǢsOȖǋÞǼɴ
DȖÞĶ_sǋƻÝʰǢsOȖǋÞǼɴDȖÞĶ_sǋƻÝ¯ŸǋʳŗrǻʰǢsOȖǋÞǼɴDȖÞĶ_sǋDǢƻʰǢsOȖǋÞǼɴDȖÞĶ_sǋNǋɴƼǼŸʰǢsOȖǋÞǼɴDȖÞĶ_sǋµǢrʰǢsOȖǋÞǼɴDȖÞĶ_sǋōNrʰǢsOȖǋÞǼɴDȖÞĶ_sǋƻħÝʰǢsOȖǋÞǼɴDȖÞĶ_sǋǢǢĵŘ_ǢɴǣOǼÞɚǼsǋs
Ǽǋ_sŎǋĨǣŸǋǋs¶ÞǣǼsǋs_Ǽǋ_sŎǋĨǣŸ¯NsǋǼÞOŸŎNŸǋƼʳDĶOĨDsǋǋɴŘ_ǋsĶǼs_Ǽǋ_sŎǋĨǣǋsŸɠŘs_EɴDĶOĨEsǋǋɴĵÞŎÞǼs_ʳȕǣs_ȖŘ_sǋĶÞOsŘǣsʳ

A Subsidiaryof