Winbond Electronics has introduced a Cyber Resilience Act (CRA) Conformance and Integration Kit for its TrustME W77Q secure flash memory family. The kit combines hardware security capabilities, software libraries, integration guidance, and testing resources for connected embedded systems, including electric vehicle (EV) charging equipment.
The W77Q secure flash family provides protected storage, authenticated firmware updates, version enforcement, rollback protection, and recovery capabilities. These functions are relevant to connected EV charging systems, where controllers and other embedded devices require secure software maintenance throughout their operating life.
The integration kit includes:
- Security mapping: Documentation connecting relevant EU CRA security objectives to W77Q capabilities.
- Hardware integration guidance: Resources for incorporating secure flash into embedded designs using external NOR flash memory.
- Software libraries: Sample code for authentication, secure storage, firmware updates, recovery, and lifecycle management.
- Verification tools: Positive and negative test scenarios, reusable test cases, and reference designs.
- Compliance documentation: Risk-assessment templates, vulnerability-handling resources, and component security evidence.
The W77Q family has achieved SESIP Level 2 certification. Winbond also incorporates post-quantum cryptography capabilities in supported devices, using the Leighton-Micali Signature (LMS) scheme for firmware and software-update authentication.
For engineers developing connected equipment such as EV chargers, the kit provides resources for integrating hardware-based security into embedded control systems and validating firmware protection mechanisms. It also offers a migration path for platforms using conventional external NOR flash, subject to hardware and software compatibility.
The kit is intended to assist manufacturers with CRA readiness, although component certification alone does not establish compliance for a finished system.
Filed Under: Charging, Technology News