Datasheet

Table Of Contents
3 Functional Description
Encryption and decryption functions jointly determined by registers configuration, eFuse parameters, and
boot mode
For more information, please refer to Chapter External Memory Encryption and Decryption (XTS_AES) in
ESP32-S3 Technical Reference Manual.
3.9.2 Secure Boot
Secure Boot feature uses a hardware root of trust to ensure only signed firmware (with RSA-PSS signature) can
be booted.
3.9.3 HMAC Accelerator
The Hash-based Message Authentication Code (HMAC) module computes Message Authentication Codes
(MACs) using Hash algorithm and keys as described in RFC 2104. The HMAC Accelerator in ESP32-S3 supports
the following features:
Standard HMAC-SHA-256 algorithm
Hash result only accessible by configurable hardware peripheral (in downstream mode)
Compatible to challenge-response authentication algorithm
Generates required keys for the Digital Signature (DS) peripheral (in downstream mode)
Re-enables soft-disabled JTAG (in downstream mode)
For more information, please refer to Chapter HMAC Accelerator (HMAC) in ESP32-S3 Technical Reference
Manual.
3.9.4 Digital Signature
A Digital Signature is used to verify the authenticity and integrity of a message using a cryptographic algorithm.
The Digital Signature (DS) in ESP32-S3 supports the following features:
RSA Digital Signatures with key length up to 4096 bits
Encrypted private key data, only decryptable by DS peripheral
SHA-256 digest to protect private key data against tampering by an attacker
For more information, please refer to Chapter Digital Signature (DS) in ESP32-S3 Technical Reference
Manual.
3.9.5 World Controller
The ESP32-S3 can divide the hardware and software resources into a Secure World and a Non-Secure World to
prevent sabotage or access to device information. Switching between the two worlds is performed by the World
Controller, which supports the following features:
Control of the CPU switching between secure and non-secure worlds
Control of 15 DMA peripherals switching between secure and non-secure worlds
Record of CPU’s world switching logs
Shielding of the CPU’s NMI interrupt
Espressif Systems 43
Submit Documentation Feedback
ESP32-S3 Series Datasheet v1.2