Taichung, Taiwan, November 4th / PRNewswire / -- Semiconductor storage solutions provider Huabang Electronics Corporation ( Winbond Electronics Corporation ) announced today the launch of a CRA compliance and integration suite suitable for its TrustME ® W77Q Secure Flash series. This suite is designed to help manufacturers accelerate their preparations for the European Union's Cyber Resilience Act ( Cyber Resilience Act , CRA ) by providing an integrated solution that includes hardware security, software, integration guidelines, testing resources, reference designs, and security evidence.
CRA imposes cybersecurity requirements for products that contain digital elements throughout their entire lifecycle, covering aspects such as secure design and development, production, vulnerability management, software maintenance, and technical documentation. Huabang states that its CRA compliance and integration kits can assist customers in transforming these requirements into implementation and system-level validation activities.
Huabang stated that TrustME ® W77Q Secure Flash has obtained SESIP Level certification, which can provide independently assessed security evidence to help customers evaluate the security of this component as well as their own product-level compliance activities. However, component-level certification alone cannot prove that the final product meets the requirements of CRA.
For platforms that are already using the external NOR Flash, if the packaging, voltage, interface, and system requirements match, W77Q can provide a feasible migration path. Huabang indicates that although integration may require hardware and software modifications, W77Q can enhance the security of external storage without adding separate security components or requiring a complete redesign of the platform.
CRA Compliance and Integration Suite
W77Q CRA The compliance and integration suite integrates a variety of resources to support implementation, testing, and documentation tasks, including:
- CRA Security Objective Mapping: Map the relevant security objectives from Appendix I of CRA to the security capabilities of W77Q.
- Hardware Integration Guide: Provides guidance on integrating W77Q as an external component into the NOR Flash solution set, while minimizing board-level modifications as much as possible.
- Underlying security libraries and sample code: Provides software components and examples for secure storage, authentication, software updates, recovery, and lifecycle management.
- CRA Integration test suite: Includes positive and negative test scenarios, as well as reusable system verification test cases.
- CRA Compliance materials: Provide risk assessment templates, vulnerability handling and supply chain documentation, security features, as well as reusable security evidence.
- Compliance check list and reference design: Provide implementation guidelines, as well as reusable examples for combining W77Q with the selected MCU platform.
- Open-source resources: including some open-source implementations, Linux reference drivers, and remote security software update components.
Supports long lifecycle and post-quantum security
This CRA suite is also built upon HuaBang's work in post-quantum cryptography (PQC) for Secure Flash. The supported W77Q devices adopt the Leighton - Micali Signature (LMS) scheme specified by NIST SP 800-208, which is used to authenticate firmware and software updates.
The security capabilities of W77Q include protected storage, certified software updates, version enforcement, rollback protection, and recovery functions, which can support the security throughout the entire lifecycle of the product. Huabang states that these capabilities help original equipment manufacturers (OEM) meet the security requirements of long-life-cycle connected products, and provide a pathway for update certifications protected by PQC when the selected devices and system architectures support it.
The Cyber Resilience Act has turned network security into a lifelong responsibility. Our CRA compliance and integration suite combines Secure Flash, software, verification assets, and reusable security evidence to help customers integrate security features and document their design. The SESIP certification provided by __BJWKEEP__ offers an independent assessment, which helps customers establish a stronger foundation for their own product-level compliance activities," stated Huabang.
jtsec Beyond IT Security The person in charge Jos é Pulido states: "Complying with the EU's Cyber Resilience Act ( CRA ) is challenging, as manufacturers must verify how third-party components meet system-level security requirements. HuaBang's W77Q Secure Flash and CRA kits address this challenge by providing hardware-enforced security capabilities, along with comprehensive integration guidelines, testing tools, and structured documentation. These readily available compliance evidences simplify the due diligence process and significantly reduce the amount of engineering work required for internal self-assessments and third-party compliance audits."
HuaBang CRA compliance and integration kits are aimed at industrial automation, industrial Internet of Things (IIoT), networking, intelligent buildings and access control, heating, ventilation, and air conditioning (HVAC), energy management, electric vehicle charging, smart home appliances, and other connected products that require secure lifecycle management and CRA preparation.
For more information on Huabang Secure Flash products and solutions, please visit the Huabang website.
About Huabang
Huabang was established in September 1987 and listed on the Taiwan Stock Exchange in 1995. The company's headquarters is located at the Central Taiwan Science Park in Taichung City, Taiwan ( CTSP ), and it operates two highly automated and intelligent 12-inch wafer factories in Taichung and Kaohsiung. Huabang is committed to providing comprehensive integrated circuit solutions for customers around the world. Its main product lines include code storage flash memory, customized storage solutions ( CMS ), as well as various logic IC solutions.
Winbond is a registered trademark of Huabang Electronics Company. Other trademarks and copyrights mentioned in this text belong to their respective owners.
Contact Information: N Token Issuance le Conley, Tanis Communications for Winbond, 831-713-9076, N Token Issuance le.conley @ taniscomm.com
