M2354 Series
NuMicro® M2354 Series – IoT Security MCU with Chip-Level Physical Security, Ultra-low Power Performance, and Complies with International Mainstream IoT Security Standards
|
Flash Memory/ |
||||
|
1024 / 256 |
||||
|
1024 / 256 |
||||
| Package |
WLCSP49 (3.455 x 3.725 mm) |
LQFP48 (7 x 7 mm) |
LQFP64 (7 x 7 mm) |
LQFP128 (14 x 14 mm) |
NuMicro® M2354 Series is an Arm® TrustZone® microcontroller based on the Armv8-M architecture and powered by the Arm® Cortex®-M23 CPU, designed to enhance IoT security. It is suitable for long-term confidentiality requirements and highly sensitive data protection scenarios.
The M2354 Series operates at frequencies up to 96 MHz, offers a wide operating voltage range of 1.7V to 3.6V, and a wide operating temperature range of -40°C to +105°C.
The power consumption is 89.3 μA/MHz in LDO mode and 39.6 μA/MHz in DC-DC mode. The Standby Power-Down mode consumes less than 2 μA. In Deep Power-Down mode with VBAT power supply, it consumes 0.5 μA and can further down to 0.1 μA without VBAT.
With the wide options of power management modes, it effectively extends the device battery life and meets the needs of long-term IoT operation.
For Secure FOTA, M2354 Series has built-in dual-bank Flash Memory of up to 1024 KB, 256 KB of SRAM, and comprehensive security features.
Security Features
| Model | Secure Boot | TrustZone | Flash Protection | Crypto Accelerators | PRNG | TRNG | Key Store | Tamper Controller | NuSMP 2.0 | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| XOM | Two-level Lock | DES/3DES | AES | SHA | HMAC | ECC | RSA | Tamper Pin | Volt. Sensor | Clk. Monitor | DPM | PLM | FVC | ||||||
|
M2354LJFAE |
(*) | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● |
| M2354LJFBE M2354SJFBE M2354KJFBE M2354CJFAE |
(**) With DICE | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● | ● |
(*) Use SHA-256 and ECDSA P-256 to validate data in APROM and LDROM
(**) Use SHA-512 and ECDSA P-521
| • | Secure Boot | |
| - | Provides Root of Trust and Chain of Trust | |
| - | M2354xJFBE and M2354CJFAE support TCG DICE | |
| • | TrustZone / Flash Protection | |
| - | TrustZone isolates secure and non-secure executing environment | |
| - | XOM (Execute-Only-Memory) protects critical code | |
| - | Flash lock bits prevent the debugging interface of Flash memory from being accessed or written by the outside | |
| • | Crypto Accelerators / PRNG & TRNG / KeyStore | |
| - | Crypto Accelerators reduce the load of the main processor in the encryption and decryption operations | |
| - | M2354xJFBE and M2354CJFAE support ECDSA P-521 | |
| - | Mitigates Side-Channel Attack and network attacks | |
| • | Tamper Controller | |
| - | Detects the state change on the pins linking to system boards for intrusion detection | |
| - | Mitigates Chassis Intrusion and Fault Injection Attack | |
| • | NuSMP 2.0 | |
| - | Compliant with PSA Level 3 and SESIP Level 3 security certification levels to meet the regulatory requirements of the EU Cyber Resilience Act (CRA) | |
NuSMP 2.0 imported by M2354 can comply with PSA Level 3 or other IoT device security certification levels of the same security level.
The entire offering suite is constructed in compliance of Chain of Trust (CoT) with several secure booting layers named NuMicro® Boot Loader 1 (NuBL1, hardware level), Boot Loader 2 (NuBL2), Boot Loader 32 (NuBL32, for Secure World), and Boot Loader 33 (NuBL33, for Non-Secure World).
With the CoT guarantee, all services and software tools can meet most of the security requirements for MCU applications.

NuSMP Functional Block Diagram
In terms of secure boot mechanisms, the M2354LJFAE, M2354SJFAE, and M2354KJFAE support the ECDSA P-256 elliptic curve signature algorithm, which provides security strength equivalent to 128-bit symmetric encryption and complies with the CNSA 1.0 standard.
The M2354xJFBE and M2354CJFAE, on the other hand, support a trust root architecture based on DICE (Device Identifier Composition Engine), which automatically generates a device-unique identity during the boot phase and establishes a Chain of Trust.
This enables effective firmware version identification and prevents rollback and tampering attacks.
Moreover, the M2354xJFBE and M2354CJFAE support the ECDSA P-521 elliptic curve signature algorithm and compliant with PSA Level 3 and SESIP Level 3 security certifications.

M2354LJFAE, M2354SJFAE, M2354KJFAE Secure Boot Diagram

M2354xJFBE and M2354CJFAE Secure Boot with DICE Diagram
For development tool support, Nuvoton provides the NuMaker-M2354KJB development board, as well as the Nu-Link debugger tool. In addition, it also supports popular development environments such as Keil MDK, IAR EWARM, Eclipse IDE with GNU GCC, etc.
M2354 Series support packages including WLCSP49 (3.455 mm x 3.725 mm), LQFP48 (7 mm x 7 mm), LQFP64 (7 mm x 7 mm) and LQFP128 (14 mm x 14 mm)
Evaluation Boards
| EVB Part No. | Supported Devices |
| NuMaker-M2354 | M2354KJFAE, M2354SJFAE, M2354LJFAE |
| NuMaker-M2354KJB | M2354KJFBE, M2354SJFBE, M2354LJFBE, M2354CJFAE |