Secure cryptoprocessor
A tamper-resistant chip that keeps cryptographic secrets secure.
A secure cryptoprocessor is a specialized microprocessor or computer-on-a-chip designed to handle cryptographic tasks. It is housed in a package that includes multiple physical security features, giving it a level of tamper resistance. The key difference from a standard cryptographic processor is that a secure cryptoprocessor never sends decrypted data or decrypted program instructions over a bus in an environment where security might be compromised. Instead, it serves as the foundation of a security subsystem, removing the need to physically protect the rest of that subsystem.
Examples include hardware security modules (HSMs), which contain one or more secure cryptoprocessor chips. These high-grade devices are used with enterprise servers and can have multiple physical security layers, with the single-chip cryptoprocessor being the most secure component. The chip never reveals keys or executable instructions on a bus unless they are encrypted, and it zeros out those keys if anyone attempts to probe or scan it. The crypto chips may also be potted inside the HSM alongside other processors and memory chips that handle encrypted data; any attempt to remove the potting triggers key zeroing. An HSM can also be part of a computer—like an ATM—that operates inside a locked safe to prevent theft, substitution, or tampering.
Modern smartcards are the most widespread form of secure cryptoprocessor, though more complex versions are used in ATMs, TV set-top boxes, military systems, and high-security portable communication gear. Some secure cryptoprocessors can even run general-purpose operating systems like Linux within their security boundary. They receive encrypted program instructions, decrypt them internally, and execute them on the same chip, where the decrypted instructions remain inaccessible. This approach, known as bus encryption, prevents technicians with legitimate access to the subsystem’s data bus from tampering with programs. Data processed by the cryptoprocessor is also often encrypted.
The Trusted Platform Module (TPM) is one implementation of a secure cryptoprocessor, bringing trusted computing to ordinary PCs by enabling a secure environment. Current TPM implementations focus on providing a tamper-proof boot environment and both persistent and volatile storage encryption. For embedded systems, there are also smaller, less complex, and less expensive
- type
- Dedicated microprocessor for cryptographic operations
- first_single_chip_design
- 1979 (US Patent 4,168,396)
- first_hsm_inventor
- Mohamed M. Atalla (1972)
- common_forms
- Hardware security module (HSM), smartcard, Trusted Platform Module (TPM)
- key_feature
- Does not output decrypted data or instructions on a bus
- security_measures
- Tamper-detecting containment, conductive shield layers, automatic zeroization, chain of trust boot-loader
Lore & Background
The hardware security module (HSM), a type of secure cryptoprocessor, was invented by Egyptian-American engineer Mohamed M. Atalla in 1972. He invented a high security module dubbed the 'Atalla Box' which encrypted PIN and ATM messages, and protected offline devices with an un-guessable PIN-generating key. He filed a patent for the device in 1972, founded Atalla Corporation that year, and commercialized the 'Atalla Box' the following year as the Identikey system. It consisted of a card reader console, two customer PIN pads, intelligent controller, and built-in electronic interface package, allowing a customer to type in a secret code transformed by the device into another code for the teller. The system was a success and led to the wide use of high security modules. Fearful that Atalla would dominate the market, banks and credit card companies began working on an international standard in the 1970s. The IBM 3624, launched in the late 1970s, adopted a similar PIN verification process to the earlier Atalla system. Atalla was an early competitor to IBM in the banking security market. At the National Association of Mutual Savings Banks conference in January 1976, Atalla unveiled an upgrade called the Interchange Identikey, adding capabilities for processing online transactions and dealing with network security.
Reader's Guide
Secure cryptoprocessors form the keystone of modern security subsystems, from smartcards and ATMs to enterprise servers and military equipment. They are designed to prevent tampering by never revealing decrypted data or program instructions on external buses, using techniques such as bus encryption, automatic zeroization upon tampering, and conductive shield layers. The Trusted Platform Module (TPM) brings this concept to ordinary PCs, enabling a tamper-proof boot environment and storage encryption. However, secure cryptoprocessors are not invulnerable. The attack on the IBM 4758 by a team at the University of Cambridge demonstrated that flaws in software loaded on the device could render the strong hardware useless. Smartcards are significantly more vulnerable to physical attack, and hardware backdoors can undermine security unless anti-backdoor design methods are used. In full disk encryption without a boot PIN, a cryptoprocessor may be vulnerable to cold boot attacks if data remanence allows memory dumping after keys are retrieved from the TPM. Despite these limitations, when sensitive data is stored only in cryptoprocessor memory and the chip is designed to prevent key revelation on bonding pads, protected data is accessible only by physically probing the chip after removing packaging and shielding—a task requiring skills and equipment beyond most technical personnel. The first single-chip cryptoprocessor design, for copy protection of personal computer software, was inspired by Bill Gates's Open Letter to Hobbyists.
Did You Know?
- The first single-chip cryptoprocessor design was for copy protection of personal computer software, inspired by Bill Gates's Open Letter to Hobbyists.
- A team at the University of Cambridge successfully extracted secret information from an IBM 4758 using mathematics and special-purpose codebreaking hardware, though the attack required full access to all API functions.
- Some secure cryptoprocessors can run general-purpose operating systems such as Linux inside their security boundary.
- The hardware security module (HSM) was invented by Egyptian-American engineer Mohamed M. Atalla in 1972.
More in Egyptian inventions 25-40
Elsewhere in the Egyptian Inventions universe
Spotted an error? Know more?
This is a living reference — every entry is fact-audited, and reader corrections feed straight into our audit queue. Suggest an edit · See this site's audit record