Microchip Technology Inc
Menu

CryptoAuthentication

A Crypto Element Device Family with Ultra-secure Hardware-based Key Storage

CryptoAuthentication Devices Keep it Real

Microchip CryptoAuthentication crypto element devices with hardware-based key storage ensure that a product, consumables it uses, firmware it runs, accessories that support it, and the network nodes it connects to are not cloned, counterfeited, or tampered with. Keeping products real helps maintain an OEM revenue flow by ensuring that only legitimate products can work in the host system and not used beyond their expiration.

Microchip offers the industry's widest selection of authentication devices featuring hardware-based key storage and cryptographic countermeasures that can fight off even the most aggressive attacks. Because attackers cannot see secret keys that are stored in protected hardware, they cannot attack.

CryptoAuthentication Devices Make It Easy

CryptoAuthentication devices support modern cryptographic standards. They work with any MCU, are extremely cost-effective, require only a single GPIO, and use very little power. Additionally, they operate over a wide voltage range and come in exceptionally small packages. Advanced protocols like ECDSA sign-verify (asymmetric authentication) and ECDH (key agreement in encryption/decryption settings) are built-in which makes adding sophisticated security easy.

CryptoAuthentication Devices Make it “Real Easy”

Cryptography is mathematically complex and highly detailed with many standards, algorithms, processes, definitions, and methodologies. Since Microchip does the hard cryptographic engineering there is no need to be a crypto expert. As a result, it is real easy to add robust security to digital systems.

CryptoAuthentication Use

  • Secure Download and Boot – Authenticate and protect code in-transit
  • Ecosystem Control – Ensure only authorized OEM and licensed nodes
  • Anti-cloning – Prevent identical BOM and stolen codes
  • Message Security – Authentication, data integrity, and confidentiality of network/IoT nodes

Key Features

  • Cost-effective Symmetric and Asymmetric Authentication Solutions
  • Secure Hash Algorithm (SHA-2), Advance Encryption Standard (AES), and Elliptic Curve Cryptography (ECC) Cryptographic Algorithms
  • Built-in ECDSA and ECDH Protocols
  • Ultra-secure Hardware-based Key Storage
  • High Quality Random Number Generators (RNG)
  • Active Shield Over the Entire Device
  • Common Serial Interfaces
  • Tamper Monitors
  • Tiny Packages
  • And more…
Tabs / Security ICs / CryptoAuthentication
Products
Documents
Tools and Software
BoM

Datasheets

Title

D/L

ATECC508A Summary
(file size: 613KB, 14 pages, revision B, updated: 10/2015)
Secure authentication and product validation device datasheet summary. The complete document is available under NDA. For more information, please contact your local Microchip sales office.
PDF

ATECC108A Summary
(file size: 608KB, 14 pages, revision B, updated: 01/2016)
Secure authentication and product validation device datasheet summary. The complete document is available under NDA. For more information, please contact your local Microchip sales office.
PDF

ATSHA204A Complete
(file size: 1.32MB, 82 pages, revision H, updated: 11/2015)
PDF

ATAES132A Summary
(file size: 590KB, 14 pages, revision B, updated: 02/2016)
PDF

ATAES132A Complete
(file size: 3.3MB, 170 pages, revision A, updated: 02/2016))
PDF

Application Notes

Title

D/L

3-lead CONTACT Package Usage
(file size: 515KB, 8 pages, revision A, updated: 08/2015)
PDF

ACES Overview
(file size: 197494, 5 pages, revision A, updated: 05/2011)
This Application Note provides an overview of the Microchip Crypto Evaluation Studio (ACES) package
PDF

Application Brief: Analyzing Strength of Security
(file size: 44KB, 4 pages, revision A, updated: 05/2011)
PDF

ATECC Compressed Certificate Definition
(file size: 448KB, 15 pages, revision A, updated: 11/2015)
Provides the details required to integrate an Microchip ATECC CryptoAuthentication device and the AT88CKECCSIGNER Module Kit into a third party certificate chain.
PDF

ATECC Production Provisioning Guide
(file size: 468KB, 19 pages, revision A, updated: 12/2015)
Discusses the software and steps required to integrate Microchip ECC-based device provisioning into a production environment.
PDF

ATECC108A/508A Factory Default Test Data
(file size: 630KB, 6 pages, revision A, updated: 07/2015)
ATECC108A and ATECC508A preset factory configuration.
PDF

ATECC508A Node Authentication Example Using Asymmetric PKI
(file size: 299KB, 12 pages, revision A, updated: 10/2015)
Application note explains the all-in-one project example which demonstrates the various stages of the node authentication sequence using public key asymmetric techniques of the Microchip CryptoAuthentication devices.

CryptoAuthentication Node Basic Example Solution .zip
(file size: 15MB, released: 01/2016)

Released:   2016 January 8
SHA256:    8f9ef68ceed02be29b6472f5b4625eb53589682a24729a205c796f4d669b5cff


PDF   ZIP

ATECC508A Public Key Validation
(file size: 338KB, 10 pages, revision A, updated: 01/2016)
Discusses the handling of public keys for which the validation function is intended and PubInfo is set to one, the operation after the Data zone is locked, and describes the command sequences in terms of the Child, Encryption, and Parent Keys.
PDF

ATSHA204 Authentication Modes
(file size: 974KB, 11 pages, revision B, updated: 11/2012)
General application of the ATSHA204 device for Fixed Challenge Authentication, Unique Challenge Authentication, Random Challenge Authentication, and Diversified Key Authentication.
PDF

ATSHA204 Command Sequences
(file size: 177KB, 21 pages, revision A, updated: 04/2013)
PDF

ATSHA204 Factory Default Test Data
(file size: 127KB, 6 pages, revision A, updated: 12/2012)
Factory default configuration values for the Configuration and Data/OTP zones specific to ATSHA204.
PDF

ATSHA204 Product Uses
(file size: 347KB, 12 pages, revision A, updated: 12/2012)
Use case examples which provide brief descriptions of the possible ATSHA204 CryptoAuthentication applications and how these applications can be implemented.
PDF

ATSHA204A and ATECC508A Personalization Guide
(file size: 299KB, 9 pages, revision C, updated: 07/2015)
PDF

ATSHA204A Symmetric Session Encryption Key Exchange
(file size: 464KB, 6 pages, revision B, updated: 11/2015)
How CryptoAuthentication devices establish a root of trust from which systems can generate session encryption keys at one end and recover them at the other without actually transmitting the keys.
PDF

Authentication Counting
(file size: 392KB, 8 pages, revision A, updated: 04/2015)
PDF

CryptoAuthentication Data Zone CRC Calculation
(file size: 393KB, 5 pages, revision A, updated: 08/2015)
Data and OTP Zone CRC calculation for the ATSHA204A, ATECC108A, and ATECC508A devices.
PDF

CryptoAuthentication Encrypted Reads and Writes
(file size: 494KB, 8 pages, revision B, updated: 10/2015)
Keeps the traffic between the CryptoAuthentication device and microcontroller encrypted to prevent snooping on the bus during personalization or system operation. The encrypted read and encrypted write are configurations of the Read and Write commands and provide a mechanism for limiting access, enabling features, or updating a key value.
PDF

CryptoAuthentication SWI and I2C Interfaces Seamless Debugging Using Saleae Logic Analyzer
(file size: 1.43MB, 9 pages, revision B, updated: 08/2015)
The purpose of this document is to help the user gain a better understanding of how to use the Microchip ATSHA204A, ATECC108A, and ATECC508A devices with the Saleae Logic Analyzer.
PDF

CryptoAuthLib: Driver Support for Microchip CryptoAuthentication Devices
(file size: 852KB, 25 pages, revision B, updated: 01/2016)
Covers how to get started and incorporate into an application, general design and use patterns, and the integration details required if CryptoAuthLib is to be ported into a hardware platform not currently supported by CryptoAuthLib.

CryptoAuthLib SAMD21 Test Host Project .zip
(file size: 14.4MB, updated: 01/2016)
An Microchip SAMD21 test host for CryptoAuthLib. This is an Atmel Studio solution for SAMD21 which incorporates CryptoAuthLib and provides a simple console interface with which to exercise ATECC508A and other CryptoAuthentication devices using the test runners that ship with CryptoAuthLib. This application tests every major feature of CryptoAuthLib and can serve as an example for using CryptoAuthLib in addition to examples such as ATECC508A Node Authentication Example Using Asymmetric PKI.

Released:   2016 January 8
SHA256:     05b840f870031157e240b2ba09f24d6eed6fabaf34893b3060849cf5ab9c0cb7


PDF   ZIP

Generating Random Secrets: ATSHA204A, ATECC108A, and ATECC508A
(file size: 791KB, 6 pages, revision B, updated: 09/2015)
Explanation on how to generate high-quality random secrets using the ATSHA204A, ATECC108A, and ATECC508A devices and Microchip Crypto Evaluation Studio (ACES).
PDF

How To Implement Firmware Anti-cloning Protection (from Pico Instruments website)

Implementing Secure Boot with the Microchip ATSHA204
(file size: 90KB, 10 pages, revision B, updated: 09/2012)
Detailed level explanation of secure boot with Microchip ATSHA204.
PDF

Migrating AT88SA102S to ATSHA204
(file size: 70KB, 5 pages, revision A, updated: 03/2013)
PDF

PCB Mounting Guidelines for Surface Mount Packages
(file size: 690KB, 19 pages, revision B, updated: 04/2016)
PDF

Secure Boot Simplified
(file size: 42 KB, 4 pages, revision A, updated: 03/2012)
High level explanation of secure boot with Microchip ATSHA204.
PDF

Secure Personalization with Transport Key Authentication
(file size: 195KB, 5 pages, revision A, updated: 11/2015)
Describes how a transport key allows for secure programming of the ATSHA204A, ATECC108A, and ATECC508A devices without the third party programming company having access to the value of the Data zone.
PDF

Unique Keys for ATSHA204
(file size: 1.96MB, 18 pages, revision A, updated: 04/2013)
PDF

Upgrading the Microchip CryptoAuthentication and Temperature Sensor Kit Firmware Using FLIP
(file size: 481KB, 9 pages, revision C, updated: 11/2015)
This Application Note describes how to upgrade the firmware in the following kits: Microchip AT88Microbase, AT30TK175STK, AT88CK101STK8, AT88CK201STK, AT88SC-ADK2, AT88CK490, and AT88CK490.
PDF

Using the Microchip ATSHA204 for Secure Password Operations
(file size: 81016, 8 pages, revision A, updated: 04/2011)
PDF

Microchip AT15735: Microchip Smart Plug Firmware User Guide
(file size: 1.1MB, 35 pages, revision A, updated: 03/2016)
(Software: file size: 5.5MB, revision B, updated: 04/2016)
This document introduces the Microchip smart plug reference design kit firmware architecture, function blocks, source project structure, and some main APIs.


PDF   ZIP

Microchip AT15736: Microchip Smart Plug Getting Started Guide
(file size: 1MB, 16 pages, revision A, updated: 03/2016)
This application note helps users to get started with the Microchip smart plug reference design kit - a highly integrated IoT solution featuring MCU, Wi-Fi, Security, and Sensing technology from Microchip.
PDF

Microchip AT16225: Microchip Smart Plug Hardware User Guide
(file size: 1.5MB, 23 pages, revision B, updated: 07/2016)
The Microchip Smart Plug Reference Design provides a system solution for a Wi-Fi enabled power plug. This document describes the hardware design of the smart plug reference design.


PDF   ZIP

Microchip AT16267: Firmware User Guide on JD Smart Cloud Service Integration with Smart Plug
(file size: 841KB, 26 pages, revision A, updated: 04/2016)
This document focuses on smart plug firmware design based on JD smart cloud, provided by JD, a Chinese retail giant. It explains the smart plug functions, firmware structure, and communication process, etc.


PDF   ZIP

Microchip AT16268: JD Smart Cloud Based Smart Plug Getting Started Guide
(file size: 1.1MB, 21 pages, revision A, updated: 04/2016)
This application note aims to help readers to get started with the Microchip? smart plug reference design working with the JD smart cloud, including both Engilsh and Chinese version.
PDF

Microchip AT17284: Proximetry Cloud Based Smart Plug User Guide
(file size: 2MB, 29 pages, revision A, updated: 04/2016)
This Application note introduces the Proximetry cloud based Microchip Smart Plug.It explains how to get the firmware code from Microchip Start, the source project structure and the APIs of Proximetry Cloud Agent Library, etc.
PDF

Articles

Title

D/L

Forward Secrecy Made Real Easy
(file size: 131KB, 3 pages, updated: 02/2016)
PDF

The "Three-Legged Stool" of Cryptography
(file size: 162KB, 5 pages, updated: 02/2016)
PDF

More Secure, Less Costly IoT Edge Node Security Provisioning
(file size: 210KB, 5 pages, updated: 11/2015)
PDF

Brochures and Flyers

Title

D/L

Microchip ATAES132 - CryptoAuthentication family of hardware security solutions

PDF

Microchip Hardware-TLS (HW-TLS) Hardening Transport Layer Security for IoT

PDF

ATSHA204A, ATAES132A, ATECC108A, and ATECC508A CryptoAuthentication Family of Hardware Security Solutions

PDF

ATECC508A Flyer

PDF

CryptoAuthentication Development and Evaluation Kit Selection Guide

PDF

Gerber Files

Title

D/L

AT88Microbase Gerber Files
(file size: 195KB, revision 1, updated: 10/2009)


ZIP

CryptoAuth Xplained Pro Gerber Files
(file size: 65KB, updated: 09/2015)


ZIP

Schematics

Title

D/L

AT88CK590 Schematic
(file size: 152KB, 2 pages, revision 1, updated: 05/2015)
PDF

AT88Microbase Schematic
(file size: 198KB, 8 pages, revision 2.0, updated: 10/2009)
PDF

CryptoAuth Xplained Pro Schematic
(file size: 515KB, 8 pages, revision A, updated: 08/2015)
PDF

User Guides

Title

D/L

AT88CK101 Development Kit Hardware User Guide
(file size: 590KB, 9 pages, revision A, updated: 11/2015)
Development kit hardware user guide which supports the Microchip ATSHA204A, ATAES132A, ATECC108A, and ATECC508A devices.
PDF

AT88CK490/590 Kits Hardware User Guide
(file size: 1.57MB, 15 pages, revision A, updated: 05/2015)
AT88CK490/590 USB dongle demo-evaluation hardware user guide for ATSHA204A, ATAES132A, and ATECC108A/508A devices.
PDF

AT88CK490/590 Kits Quick Start User Guide
(file size: 318KB, 2 pages, revision A, updated: 05/2015)
AT88CK490/590 USB dongle demo-evaluation quick start guide for ATSHA204A, ATAES132A, and ATECC108A/508A devices.
PDF

AT88CK9000 User Guide
(file size: 1.65MB, 22 pages, revision C, updated: 12/2014)
Secure Personalization Kit for Microchip CryptoAuthentication User Guide
PDF

AT88Microbase Hardware User Guide
(file size: 459KB, 10 pages, revision A, updated: 03/2011)
PDF

ATAES132A Firmware Development Library User Guide
(file size: 218KB, 11 pages, revision A, updated: 01/2016)
ATAES132A Firmware Development Library use with a customized security project and how to tune it towards the hardware.
PDF

ATSHA204A and ATECC108A/508A Firmware Development Library User Guide
(file size: 500KB, 10 pages, revision D, updated: 07/2015)
PDF

CryptoAuth Xplained Pro Hardware User Guide
(file size: 625KB, 11 pages, revision A, updated: 09/2015)
PDF

Security Provisioning Kits Quick Start Guide
(file size: 275KB, 4 pages, revision B, updated: 12/2015)
Quick start guide for the Security Provisioning Kits which include the AT88CKECCROOT, AT88CKECCSIGNER, and AT88CKECCPROVISION USB module kits.
PDF

Security Provisioning Root Module Kit User Guide
(file size: 794KB, 17 pages, revision A, updated: 12/2015)
User guide for the AT88CKECCROOT USB Provisioning Root Module kit to easily and securely create a certificate authority for provisioning the Microchip ECC-based CryptoAuthentication devices. Document describes un-configured Root Module Flow to create customized Certificate Authority and configured Root Module flow to create additional Root modules.
PDF

Security Provisioning Signer Module Kit User Guide
(file size: 922KB, 18 pages, revision A, updated: 12/2015)
User guide for the AT88CKECCSIGNER USB Provisioning Signer Module kit to easily and securely create an intermediate certificate authority for provisioning the Microchip ECC-based CryptoAuthentication devices. Document describes un-configured Signer Module Flow to create customized Certificate Authority and configured Signer Module flow to create additional intermediate Certificate Authorities.
PDF

White Papers

Title

D/L

256 Bit Key - Is It Big Enough?
(file size: 111KB, 12 pages, revision B, updated: 04/2013)

PDF

Attack Methods to Steal Digital Secrets
(file size: 279KB, 8 pages, revision A, updated: 06/2015)

PDF

Protecting People, Data and Profits with Security-Optimized Embedded Designs
(file size: 188KB, 9 pages, updated: 02/2013)

PDF

Protecting People, Data and Profits with Security-Optimized Embedded Designs Part 2
(file size: 188KB, 9 pages, updated: 02/2013)

PDF

RSA vs ECC Comparison for Embedded Systems
(file size: 358KB, 5 pages, revision A, updated: 07/2015)

PDF

Security for Intelligent, Connected IoT Edge Nodes
(file size: 661 KB, 10 pages, updated: 11/2015)

PDF

Evaluation Kit

Title

Description

AT88CK590 Evaluation Kit

Evaluation Kit for the Microchip CryptoAuthentication™ ATSHA204A, ATAES132A, and ATECC508A Devices

CryptoAuth Xplained Pro

Evaluation and development extension platform for embedded Microchip ATSHA204A, ATAES132A, and ATECC508A design applications

AT88CKSCKTSOIC-XPRO

The AT88CKSCKTSOIC-XPRO is an XPRO extension board that attaches 8-pin SOIC CryptoAuthentication devices to Microchip MCU's that support an XPRO interface. All Microchip Crypto Authentication devices regardless of interface can be used with this board.

AT88CKSCKTUDFN-XPRO

The AT88CKSCKTUDFN-XPRO is an XPRO extension board that attaches 8-pin UDFN CryptoAuthentication devices to Microchip MCU's that support an XPRO interface. All Microchip Crypto Authentication devices regardless of interface can be used with this board.

ATXPANDER-XPRO

The ATXpander-XPRO passively expands an XPRO extension header from a single kit to up to 3 kits. The board also allows for easy wiring modifications to be made if so required.

Starter Kit

Title

Description

AT88CKECC-AWS-XSTK

AWS Zero Touch Secure Provisioning Kit

Development Kit

Title

Description

AT88CK101 Development Kit

Single socket secure authentication development kit for the Microchip ATSHA204A, ATECC508A, and ATAES132A CryptoAuthentication™ devices. Supports the Xplained Pro series.

Programmer

Title

Description

AT88CK9000 - Secure Personalization Kit

Secure Personalization Kit for Microchip CryptoAuthentication

Security Provisioning Kits

Part of the Microchip Certified-ID platform, these USB module kits are used for provisioning Microchip ECC-based devices during production of boards/products.


Software Libraries

Title

Description

Microchip Hardware-TLS Platform

Microchip Hardware-TLS software libraries for wolfSSL and OpenSSL enable hardware-based elliptic curve mutual authentication for TLS using the ATECC508A Crypto co-processor. With Microchip HW-TLS support libraries, system designers using wolfSSL or OpenSSL can take advantage of Microchip Crypto hardware to enable strong mutual authentication between communicating devices as well as store keys, certificates and other sensitive data in a protected hardware storage.

CryptoAuthentication ATAES132A Development Library

Microchip CryptoAuthentication™ ATAES132A Development Source Code Template Library

CryptoAuthLib

Software library support for the ATSHA204A, ATECC108A, and ATECC508A CryptoAuthentication devices written in C.

Software Tools

Title

Description

Microchip Crypto Evaluation Studio (ACES)

The ACES package is a suite of software tools to configure and demonstrate the Microchip CryptoAuthentication Family of devices using various evaluation kits.