Difference between revisions of "SEC01"
(Created page with "Category:STM32Category:STM32WorldCategory:Work in progress{{metadesc|STM32World Security and Encryption}} == Security ICs == == Miscellaneous Links ==") |
|||
(9 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
[[Category:STM32]][[Category:STM32World]][[Category:Work in progress]]{{metadesc|STM32World Security and Encryption}} | [[Category:STM32]][[Category:STM32World]][[Category:Work in progress]]{{metadesc|STM32World Security and Encryption}} | ||
+ | [[SEC01]] is a [[:Category:Work in progress|planned]] [[STM32World]] board containing a few different security ICs. | ||
+ | |||
== Security ICs == | == Security ICs == | ||
+ | === ATECC608(A/B) === | ||
+ | |||
+ | Microchip Security Verification / Encryption IC available at JLCPCB (part no: C616908 (ATECC608A) or C17350254 (ATECC608B)) at $2.00. | ||
+ | |||
+ | ==== Features ==== | ||
+ | • Cryptographic Co-Processor with Secure Hardware-Based Key Storage: | ||
+ | ** Protected storage for up to 16 keys, certificates or data | ||
+ | • Hardware Support for Asymmetric Sign, Verify, Key Agreement: | ||
+ | ** ECDSA: FIPS186-3 Elliptic Curve Digital Signature | ||
+ | ** ECDH: FIPS SP800-56A Elliptic Curve Diffie-Hellman | ||
+ | ** NIST Standard P256 Elliptic Curve Support | ||
+ | • Hardware Support for Symmetric Algorithms: | ||
+ | ** SHA-256 & HMAC Hash including off-chip context save/restore | ||
+ | ** AES-128: Encrypt/Decrypt, Galois Field Multiply for GCM | ||
+ | • Networking Key Management Support: | ||
+ | ** Turnkey PRF/HKDF calculation for TLS 1.2 & 1.3 | ||
+ | ** Ephemeral key generation and key agreement in SRAM | ||
+ | ** Small message encryption with keys entirely protected | ||
+ | • Secure Boot Support: | ||
+ | ** Full ECDSA code signature validation, optional stored digest/signature | ||
+ | ** Optional communication key disablement prior to secure boot | ||
+ | ** Encryption/Authentication for messages to prevent on-board attacks | ||
+ | • Internal High-Quality NIST SP 800-90A/B/C Random Number Generator (RNG) | ||
+ | • Two High-Endurance Monotonic Counters | ||
+ | • Unique 72-Bit Serial Number | ||
+ | • Two Interface Options Available: | ||
+ | ** High-Speed Single Wire Interface with One GPIO Pin | ||
+ | ** 1 MHz Standard I2C Interface | ||
+ | • 1.8V to 5.5V IO Levels, 2.0V to 5.5V Supply Voltage | ||
+ | • Two Temperature Ranges Available: | ||
+ | ** Standard Industrial Temperature Range: -40℃ to +85℃ | ||
+ | ** Extended Industrial Temperature Range: -40℃ to +100℃ | ||
+ | • <150 nA Sleep Current | ||
+ | • Packaging Options | ||
+ | ** 8-pad UDFN, 8-lead SOIC and 3-Lead Contact Package Options | ||
+ | ** Die-on-Tape and Reel and WLCSP for Qualified Customers (Contact Microchip Sales) | ||
== Miscellaneous Links == | == Miscellaneous Links == | ||
+ | |||
+ | * [https://wmsc.lcsc.com/wmsc/upload/file/pdf/v2/lcsc/2311141807_Microchip-Tech-ATECC608B-MAVDA-S_C17350254.pdf ATECC608B CryptoAuthenticatn Device Summary Data Sheet] | ||
+ | * [https://stm32world.com/images/9/96/Microchip_ATECC508A_Datasheet.pdf ATECC508A Complete Datasheet] |
Latest revision as of 11:49, 20 June 2024
SEC01 is a planned STM32World board containing a few different security ICs.
Security ICs
ATECC608(A/B)
Microchip Security Verification / Encryption IC available at JLCPCB (part no: C616908 (ATECC608A) or C17350254 (ATECC608B)) at $2.00.
Features
• Cryptographic Co-Processor with Secure Hardware-Based Key Storage:
- Protected storage for up to 16 keys, certificates or data
• Hardware Support for Asymmetric Sign, Verify, Key Agreement:
- ECDSA: FIPS186-3 Elliptic Curve Digital Signature
- ECDH: FIPS SP800-56A Elliptic Curve Diffie-Hellman
- NIST Standard P256 Elliptic Curve Support
• Hardware Support for Symmetric Algorithms:
- SHA-256 & HMAC Hash including off-chip context save/restore
- AES-128: Encrypt/Decrypt, Galois Field Multiply for GCM
• Networking Key Management Support:
- Turnkey PRF/HKDF calculation for TLS 1.2 & 1.3
- Ephemeral key generation and key agreement in SRAM
- Small message encryption with keys entirely protected
• Secure Boot Support:
- Full ECDSA code signature validation, optional stored digest/signature
- Optional communication key disablement prior to secure boot
- Encryption/Authentication for messages to prevent on-board attacks
• Internal High-Quality NIST SP 800-90A/B/C Random Number Generator (RNG) • Two High-Endurance Monotonic Counters • Unique 72-Bit Serial Number • Two Interface Options Available:
- High-Speed Single Wire Interface with One GPIO Pin
- 1 MHz Standard I2C Interface
• 1.8V to 5.5V IO Levels, 2.0V to 5.5V Supply Voltage • Two Temperature Ranges Available:
- Standard Industrial Temperature Range: -40℃ to +85℃
- Extended Industrial Temperature Range: -40℃ to +100℃
• <150 nA Sleep Current • Packaging Options
- 8-pad UDFN, 8-lead SOIC and 3-Lead Contact Package Options
- Die-on-Tape and Reel and WLCSP for Qualified Customers (Contact Microchip Sales)