GigaDevice GD32W — Wi-Fi and BLE on Cortex-M33

GD32W is GigaDevice's wireless MCU line, anchored by the GD32W515 / GD32W517 series. Launched in 2022, it pairs a Cortex-M33 with TrustZone-M, a single-band 2.4 GHz Wi-Fi 4 radio (802.11 b/g/n), and a Bluetooth Low Energy 5.x controller — all on one die, with HMAC / AES-128/256 / SHA-1/256 hardware accelerators. The pitch is the integrated alternative to a discrete Wi-Fi/BLE radio (ESP32, Realtek RTL8720, Infineon CYW43439) plus a separate host MCU, with the security pedigree to match an STM32WB or U5.

This page covers the architecture, the RF stack, the security model, and the design considerations that come up when you put a 20 dBm 2.4 GHz transmitter next to a 240 MHz CPU on a 4-layer PCB.

Architecture overview

The GD32W515 splits into three blocks on one die: the application MCU subsystem (M33 + memory + standard MCU peripherals), the radio subsystem (PHY + MAC + RF front end), and the security subsystem (crypto accelerators + secure boot ROM). They share the same AHB matrix but the radio and the application core run on separate clock domains, with handoff through shared SRAM.

The Wi-Fi 4 + BLE radio

The radio is single-band 2.4 GHz, configurable as Wi-Fi only, BLE only, or both with time-multiplexed coexistence:

• Wi-Fi: 802.11 b/g/n, single spatial stream (1T1R), 20 MHz channel bandwidth, MCS0 through MCS7, short guard interval, beamformee. PHY rate up to 72.2 Mbps; sustained throughput in TCP iperf around 30-40 Mbps because of the M33's limited TCP processing.
• BLE: BLE 5.x — 1 Mbps, 2 Mbps, and coded PHYs (S2 and S8 for long-range). Support for extended advertising, periodic advertising, and LE Audio (isochronous channels) on later W517 silicon.
• Coexistence: a cooperative scheduler in the radio firmware time-slices the radio between Wi-Fi and BLE. Wi-Fi traffic is queued and held while a BLE event runs; BLE connection events are scheduled around the Wi-Fi DTIM. The W517 adds TWT (Target Wake Time) negotiation that lets the chip sleep deeper during scheduled Wi-Fi idle.

The integrated PA reaches +20 dBm Wi-Fi and +8 dBm BLE. The RX sensitivity is -97 dBm for 11n MCS0 and -98 dBm for BLE 1M — competitive with discrete radios in the same class.

Comparison with competitors

The GD32W515 occupies the price-sensitive end: single-band Wi-Fi 4 is cheaper than Wi-Fi 6, single 2.4 GHz radio is cheaper than dual-band, and the M33 at 180 MHz is enough for MQTT / HTTPS / TLS but not for high-throughput VoIP or video. Volume use cases are smart home (smart plug, smart switch, smart lock), industrial telemetry gateways, and white-goods cloud connectivity.

Security model

The W515 implements TrustZone-M with the typical Cortex-M33 split: Secure and Non-secure worlds, each with its own stack and exception state, transitions through SG (Secure Gateway) veneers. The secure boot ROM verifies the first-stage bootloader's ECDSA-P256 signature against a hash burned into one-time-programmable fuses (OTP); the bootloader then verifies the application image.

Crypto hardware:

• AES — 128/256 bit, ECB / CBC / CTR / GCM / CCM modes, used by Wi-Fi WPA2-PSK / WPA3-SAE and BLE 5.x link-layer encryption.
• SHA — SHA-1 and SHA-256 with hardware HMAC wrapper.
• TRNG — NIST SP 800-90B compliant, used for ECDSA nonces, BLE pairing entropy, and Wi-Fi WPA3 SAE.
• PKA (W517 only) — public-key accelerator: ECC P-256 / P-384, RSA-2048, modular exponentiation. ECDSA P-256 sign in roughly 6 ms vs ~80 ms on the M33 alone with mbedTLS.

The secure flash region is configurable in 4 KB granules; the bootloader, the BLE keystore, and the Wi-Fi PSK live in secure flash, and the application runs in non-secure flash. The Wi-Fi MAC and BLE link layers run in secure-callable code so the radio keys never leak to non-secure context.

Reference SDK and cloud examples

GigaDevice ships the GD32W51x SDK based on FreeRTOS with lwIP for TCP/IP, mbedTLS for TLS 1.2 / 1.3, and the Wi-Fi / BLE drivers as binary middleware. Reference applications include:

• AWS IoT Core MQTT over TLS 1.2 with client-certificate authentication.
• Alibaba Cloud Link Kit (the dominant Chinese IoT platform).
• BLE provisioning of Wi-Fi credentials through a smartphone app.
• HTTPS OTA firmware updates with A/B slot swap.
• LE Audio Bluetooth speaker reference (on the W517).

# Build a W515 firmware with GD32W51x SDK and GCC
cd GD32W51x_SDK/example/wifi_mqtt
make CHIP=GD32W515 TOOLCHAIN=gcc -j8
# Flash via USART bootloader (BOOT0 high on power-on)
gd-link-cli -f build/wifi_mqtt.bin -d GD32W515 -p /dev/cu.usbserial-110

RF design considerations

The W515's integrated PA reaches +20 dBm, which means PCB layout matters more than for a typical MCU. GigaDevice's reference design uses:

• A pi-network impedance match between the chip's RF pin and a chip antenna or U.FL connector.
• A 50 Ω microstrip on a 0.2 mm dielectric, kept under 20 mm long, with continuous ground reference.
• A keepout zone under the antenna (no copper pour, no traces).
• A dedicated 1 µF + 100 nF + 10 nF decoupling stack on the RF supply pin.

The eval board (GD32W515-EVAL) has an FCC / CE pre-certified RF section that designers can copy verbatim. For custom layouts, GigaDevice publishes AN119 with antenna design hooks, recommended chip antennas (Yageo ANT016008LCD2442 is the typical choice), and the test report from the reference design.

Cross-references

• GigaDevice GD32 landing — vendor overview.
• GD32L low-power — non-wireless M23 sibling.
• STM32 wireless WB / WL — BLE and LoRa siblings on STM32.
• Nordic nRF53 — dual-core BLE comparison.
• Cortex-M33 — TrustZone-M architecture.
• SPI and UART — peripheral docs.

External links

• GD32W51x product page
• GD32W515 datasheet
• GD32W51x SDK on GitHub
• GD32W515-MIN pre-certified module datasheet
• GigaDevice application note AN119 — RF and antenna design
• Alibaba Cloud Link Kit reference