Secure Compute Hardware

Zymbit’s modular products offer increasing levels of device security, key management and compute power.

https://www.zymbit.com/wp-content/uploads/2022/03/Secure-Hardware-Solutions-Graphic_2022031W_zymkey4.png
https://www.zymbit.com/wp-content/uploads/2022/03/Secure-Hardware-Solutions-Graphic_2022031V_HSM6.png
https://www.zymbit.com/wp-content/uploads/2022/03/Secure-Hardware-Solutions-Graphic_2022031V_HSM4.png
https://www.zymbit.com/wp-content/uploads/2022/03/Secure-Hardware-Solutions-Graphic_2022031V_SCM.png
https://www.zymbit.com/wp-content/uploads/2023/04/Secure-Hardware-Solutions-Graphic_20230407_SEN.png
https://www.zymbit.com/wp-content/uploads/2022/03/Secure-Hardware-Solutions-Graphic_2022031s_3000x1500_bgno.png

Hardware Security Modules

  • SD card encryption with LUKS integration
  • Measured system identity & authentication
  • Secure key generation & storage
  • Data encryption & signing
  • Physical tamper sensors
  • Real time clock

ZYMKEY4

Plug-in security module for Raspberry Pi

HSM6 - embedded hardware wallet

HSM4

Embedded version of ZYMKEY4 for customer integration

HSM6 - embedded hardware wallet

Embedded Hardware Wallets

  • HD wallet, BIP 32/39/44 compliant
  • 640 key slots, public/private, foreign
  • ED25519, X25519, secp256k1, secp256r1
  • Shamir’s wallet recovery, SLIP39 compliant
  • Ideal for decentralized blockchain, crypto
  • Fully encapsulated tamper resistant module (HSM6)
  • Faster wallet + compute (SCM+)

HSM6

Hardware wallet module for easy integration

HSM6 - embedded hardware wallet

SCM+

Fast hardware wallet +  Pi compute module + verified boot

HSM6 - embedded hardware wallet

Secure Compute Modules & Nodes

Secure, modular and ready to scale

  • Fully integrated compute & security hardware
  • Open modular design for easy customization
  • Optional verified boot for PiCM4
  • Optional secure hardware wallet
  • Optional pre-provisioned for AWS
  • Tamper resistant customizeable enclosures

SCM

Pi compute module + verified boot + security module + optional wallet

zymbit secure compute module with verified boot

SEN

Fully enclosed SCM + motherboard + power supply + tamperware. 

zymbit secure compute module with verified boot

Compare Zymbit Products

ZYMKEY4
for RPI, Jetson
HSM4
encapsulated module
HSM6
hardware wallet
SCM
secure compute module
SCN
secure compute node
COMPUTE RESOURCES
ZYMKEY4 HSM4 HSM6 SCM SCN
 PiCM4 comprising:
Broadcom BCM2711 quad-core Cortex-A72 (ARM v8) 64-bit SoC @ 1.5GHz
H.265 (HEVC) (up to 4Kp60 decode), H.264 (up to 1080p60 decode, 1080p30 encode)
OpenGL ES 3.1, Vulkan 1.0 Options for 1GB, 2GB, 4GB or 8GB LPDDR4-3200 SDRAM
Options for 0GB (“Lite”), 8GB, 16GB or 32GB eMMC Flash memory
Option for fully certified radio module: 2.4 GHz, 5.0 GHz IEEE 802.11 b/g/n/ac wireless; Bluetooth 5.0, BLE;
On-board electronic switch to select either external or PCB trace antenna
MOTHERBOARD
ZYMKEY4 HSM4 HSM6 SCM SCN
 Tamper resistant enclosure
 Power supply input +12V, 2.5A, barrel jack
+12V SATA PWR optional
 PCIE
 USB
 HDMI
 Tamper Switches 4
 HDMI
 HDMI
 KEY STORAGE
ZYMKEY4 HSM4 HSM6 SCM SCN
 Generate secure key pairs
Private key never exposed
 Tamper resistant secure element key store
 Private/public key pairs 3 3 512 512 512
 Foreign public keys 128 128 128
 Master key recovery
       
 CRYPTOGRAPHIC PRIMITIVES
ZYMKEY4 HSM4 HSM6
 BIP 32/39/44 HD wallet
 ECC KOBLITZ P-256 (secp256k1)
 ED25519, X25519
 ECDH (FIPS SP800-56A)
 TRNG (NIST SP800-22)
 ECC NIST P-256 (secp256r1)
 ECDSA (FIPS186-3)
 AES-256 (FIPS 197)
       
TAMPER DETECTION SENSORS
ZYMKEY4 HSM4 HSM6
Perimeter breach detection circuits – standard 2 2
Perimeter breach detection circuits – enhanced 2
Accelerometer shock & orientation sensor
Power rail monitor
Temperature of security module
       
SOFTWARE API
ZYMKEY4 HSM4 HSM6
Python
C++
C
       
ELECTRO MECHANICAL INTERFACE
ZYMKEY4 HSM4 HSM6
Format MiniHat Module Module
Connectors GPIO: 10pin header
Perim: 5pin microusb
All: 30pin Hirose DF40HC
All: 30pin Hirose DF40HC
Communication I2C I2C I2C
Production mode lock Cut Tab
Software API Software API
       
DEVICE MULTI-FACTOR IDENTITY
& AUTHENTICATION

ZYMKEY4 HSM4 HSM6
Host hardware measurement
Custom authentication factors
Host code measurement
       
 DATA ENCRYPTION & SIGNING
ZYMKEY4 HSM4 HSM6
 Encrypt root file system with dm-crypt
LUKS key manager hook
 Encrypt data blobs with “zblock” function
 Encrypt data in flight with OpenSSL integration
       
 OTHER FEATURES
ZYMKEY4 HSM4 HSM6
True Random Number Generator
Real Time Clock
Backup battery – for RTC and perimeter circuits Onboard Offboard Offboard
Backup battery monitor
Last Gasp battery removal detection
OEM Custom features
       
 EXAMPLE CIPHER SUITES
ZYMKEY4 HSM4 HSM6
 AWS-IOT | TLS_ECDHE_ECDSA_AES256_SHA
 MS-AZURE | TLS_ECDHE_ECDSA_AES_128_GCM_SHA256_P256
       
 ACCESSORIES
ZYMKEY4 HSM4 HSM6
Developer Kits
Reference Designs
Custom Integrations
       
 READY TO GET STARTED?
ZYMKEY4 HSM4 HSM6
Learn more > Learn more > Learn more>
BUY NOW BUY NOW BUY NOW

= standard feature
= OEM feature

Compare Security Modules

ZYMKEY4
for RPI
HSM4
encapsulated module
HSM6
hardware wallet
 KEY STORAGE
ZYMKEY4 HSM4 HSM6
 Generate secure key pairs
Private key never exposed
 Tamper resistant secure element key store
 Private/public key pairs 3 3 512
 Foreign public keys 128
 Master key support
       
 CRYPTOGRAPHIC PRIMITIVES
ZYMKEY4 HSM4 HSM6
 BIP 32/39/44 HD wallet
 ECC KOBLITZ P-256 (secp256k1)
 ED25519, X25519
 ECDH (FIPS SP800-56A)
 TRNG (NIST SP800-22)
 ECC NIST P-256 (secp256r1)
 ECDSA (FIPS186-3)
 AES-256 (FIPS 197)
       
TAMPER DETECTION SENSORS
ZYMKEY4 HSM4 HSM6
Perimeter breach detection circuits – standard 2 2
Perimeter breach detection circuits – enhanced 2
Accelerometer shock & orientation sensor
Power rail monitor
Temperature of security module
       
SOFTWARE API
ZYMKEY4 HSM4 HSM6
Python
C++
C
       
ELECTRO MECHANICAL INTERFACE
ZYMKEY4 HSM4 HSM6
Format MiniHat Module Module
Connectors GPIO: 10pin header
Perim: 5pin microusb
All: 30pin Hirose DF40HC
All: 30pin Hirose DF40HC
Communication I2C I2C I2C
Production mode lock Cut Tab
Software API Software API
       
DEVICE MULTI-FACTOR IDENTITY
& AUTHENTICATION

ZYMKEY4 HSM4 HSM6
Host hardware measurement
Custom authentication factors
Host code measurement
       
 DATA ENCRYPTION & SIGNING
ZYMKEY4 HSM4 HSM6
 Encrypt root file system with dm-crypt
LUKS key manager hook
 Encrypt data blobs with “zblock” function
 Encrypt data in flight with OpenSSL integration
       
 OTHER FEATURES
ZYMKEY4 HSM4 HSM6
True Random Number Generator
Real Time Clock
Backup battery – for RTC and perimeter circuits Onboard Offboard Offboard
Backup battery monitor
Last Gasp battery removal detection
OEM Custom features
       
 EXAMPLE CIPHER SUITES
ZYMKEY4 HSM4 HSM6
 AWS-IOT | TLS_ECDHE_ECDSA_AES256_SHA
 MS-AZURE | TLS_ECDHE_ECDSA_AES_128_GCM_SHA256_P256
       
 ACCESSORIES
ZYMKEY4 HSM4 HSM6
Developer Kits
Reference Designs
Custom Integrations
       
 READY TO GET STARTED?
ZYMKEY4 HSM4 HSM6
Learn more > Learn more > Learn more>
BUY NOW BUY NOW BUY NOW

= standard feature
= OEM feature

Engineered Solutions

Need something custom?

Zymbit provides custom features, full turnkey solutions, tools and engineering services for volume manufacture.
https://www.zymbit.com/wp-content/uploads/2021/02/Zymbit-Custom-Engineered-Solutions-Hardware-1.png

Ready to get started?

Explore and select the best Zymbit product for your application. If you have questions or need something custom then were ready to help.
I’M READY TO BUY
Zymbit products are available from major distributors around the world, or directly from our webstore.
I HAVE QUESTIONS
If you need help with your application, or want to discuss a custom solution then contact us today.
https://www.zymbit.com/wp-content/uploads/2017/11/Zymbit-Logo-noBG-small.png

120 Cremona Drive, Goleta, 

California, 93117, USA

+1 (805) 481 4570

GET UPDATES

Subscribe to email updates.