What I learned recently is that, at least in the open source world: 1) there is a very tiny number of mcu that you can use without NDA, and thus there's little

What I learned recently is that, at least in the open source world: 1) there is a very tiny number of mcu that you can use without NDA, and thus there's little choice and you often have to trade off between features 2) having crypto in hardware reduces exportability and thus increases cost For example, in making Solo (open source security key) [1], we were planning to use NRF or SAM L11 chips, but gave up because of power consumption or flash available. We ended up with STM32L4, and we had to go for L432 that doesn't have AES in hw because it's cheaper and easier to find than the L442 with AES. Conor recently spoke about this at Shmoocon 2019: [2]. [1] https://solokeys.com https://solokeys.com [2] https://youtu.be/fVgUwHr2RUU https://youtu.be/fVgUwHr2RUU