Conclusion Overview
The secure chip used in imKey is the Infineon SLE 78CLUFX5000PH.
This ordering code belongs to the high-security SLE78 platform, where the letter “U”indicates that the chip includes a USB peripheral.
Its internal security controller is the M7893, and the corresponding security controller platform has passed the Common Criteria (CC) EAL6+ augmented certification.
Therefore, the model description is accurate and the security level is fully supported by formal certification evidence.
FAQ
Q1: What exactly is the chip used in imKey?
A:
The imKey hardware wallet uses the Infineon SLE 78CLUFX5000PH secure chip.
It belongs to Infineon's SLE78 high-end security controller family, providing hardware-level security features for financial and identity authentication scenarios, such as:
- Secure boot
- Secure storage
- True Random Number Generator (TRNG)
- Robust physical and logical security countermeasures
Note: The SLE78 series naming convention consists of several fields (see diagram in naming rules). Common field meanings include:
- “78” – Product group (high security)
- “C” – Series / process generation
- “L” – Main interface: Contactless (RFI)
- “U” – USB peripheral (can coexist with L, meaning this device supports USB)
- “F” – Related to NVM / flash loader
- “5000” – NVM capacity class
- “PH” – Package / electrical characteristic derivative code
Q2: Why can't I find the full code “SLE 78CLUFX5000PH” on Infineon’s public website?
A: There are two practical reasons:
1. Public catalog numbers do not always match shipment ordering codes.
Security chips often have derivative or custom ordering codes based on customer requirements and peripheral combinations.
Public catalogs usually list main/representative models, not every possible combination.
2. Related family models can be found publicly.
Models like SLE 78CLFX5000PH / SLE 78CFX5000PH are publicly listed and belong to the same product family as the chip used by imKey.
The differences mainly lie in peripheral configuration fields (explained in the next question).
Thus, “cannot be found on the website” does not mean the code is invalid or fake—it simply reflects the common situation that the public pages do not include all derivative ordering numbers.
Q3: What is the relationship between SLE 78CLUFX5000PH and SLE 78CLFX5000PH / SLE 78CFX5000PH?
A:
All three belong to the same SLE78 family, but represent different peripheral configurations or derivatives:
- “L” = Contactless interface (RFI)
- “U” = USB peripheral
- “F” = Related to NVM / Flash loader
Other fields denote capacity, package, and application variants.
Thus, SLE 78CLUFX5000PH can be understood as a CLF-based derivative that adds the USB peripheral (“U”)—which aligns with imKey’s product usage (a security controller with USB functionality).
This explains why the imKey chip model includes the additional “U”.
In the naming specification diagram, “Main Interfaces” clearly lists:
L = Contactless (RFI)
U = USB
Q4: Why does the CC certificate show “M7893” instead of “SLE 78C…xxxx”?
A:
Common Criteria (CC) evaluations are conducted on security controller platforms—not individual shipping ordering codes. The certified scope includes:
- Controller core
- Security libraries / OS version
- Development/production toolchain
Within the SLE78 family, ordering codes like SLE 78CLUFX5000PH are derivative products built on top of the certified security controller platform.
The chip used by imKey is based on the M7893 controller.
In the CC certificate (e.g., certificate number BSI-DSZ-CC-0879-V4-2020), the certified item is written as:
“Infineon Security Controller M7893 … EAL6 augmented (EAL6+)”
In other words:
- The certificate refers to the platform (controller + security library)
- The derivative part number (e.g., SLE 78CLUFX5000PH) is built upon that platform
- Therefore, it inherits the same certified security level (within the scope and configuration of the certification)
The BSI certificate explicitly states:
“Infineon Security Controller M7893 … EAL 6 augmented by ALC_FLR.1”
This is why the certificate model is M7893, not a “78C…” code—because CC focuses on the controller platform.
Q5: Does this mean imKey has CC EAL6+ security assurance?
A: Yes. Based on the platform relationship:
- imKey uses a chip built on the M7893 security controller platform
- The M7893 platform has passed CC EAL6+ (augmented)
- Therefore, the chip used in imKey is built on top of an EAL6+-certified platform
Industry-standard phrasing is:
“The secure chip used is based on a CC EAL6+–certified security controller platform (M7893).”
Note:
The CC certificate defines platform composition boundaries (controller, libraries, configuration versions, etc.).
Manufacturers follow the certified configurations during production to remain within the certified scope.
Important Notice:imKey sells physical security hardware products only and does not provide any virtual asset trading, custody, or funds-related services. References to third-party wallets, exchanges, or decentralized applications are for compatibility purposes only; related functions and services are provided independently by third parties.
0 comments
Article is closed for comments.