# Secure Element

Secure Element utilized in Citadel Wallet has an independent Common Criteria EAL 6+ security certification up to OS level and supports both RSA & ECC asymmetric cryptographic algorithms with high key length and future proof ECC curves. Latest security measures in this secure element protect the chip against invasive and non-invasive attacks. For a comparison, Ledger hardware wallets are certified to only up to EAL 5+ security level.

<figure><img src="https://762305612-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxeZE2mwzV0U7R9pP4xHj%2Fuploads%2F0qJgw1RJRSt6u2EddptA%2FSecure%20Element.png?alt=media&#x26;token=3488dde4-3730-4e17-a15a-e71fad4d08c1" alt=""><figcaption></figcaption></figure>

Secure element is specifically designed for blockchain, secure IoT, government ID and secure key storage applications. It requires a host controller, which will communicate with the secure element through I2C interface and make key operation requests such as key creation, message signing and verifying. It generates the private/public key pairs for asymmetric encryptions internally to the secure element and private keys never leave the chip. Some of the major features of the Secure Element include:

* CC EAL 6+ and SESIP4 certified HW and OS
* FIPS 140-2 certified platform with Security Level 3 and Security Level 4 related to Physical Security of the HW
* Effective protection against advanced attacks, including Power Analysis and Fault Attacks
* Multiple logical and physical protection layers, including metal shielding, end-to-end encryption, memory encryption, tamper detection
* RSA and ECC asymmetric cryptography algorithms, future proof curves and high key length, e.g. Brainpool, Edwards and Montgomery curves
* AES and DES symmetric cryptographic algorithms for encryption and decryption
* HMAC, CMAC, SHA-1, SHA-224/256/384/512 operations
* Extended temperature range for industrial applications (-40 °C to +105 °C)

Hedera accounts require ED25519, RSA-3072 or ECDSA cryptographic pairs for account creation and interaction with the network. Secure Element used in Citadel Wallet support all options.