1.

Introduction

The ATECC608B is a member of the Microchip CryptoAuthentication™ family of high-security cryptographic devices,

which combine world-class, hardware-based key storage with hardware cryptographic accelerators to implement

various authentication and encryption protocols.

The ATECC608B provides security enhancements over that of the ATECC608A, while providing complete backwards

compatibility. All configuration settings, commands, packages and functionality of the ATECC608A are still available

in the ATECC608B, making migration from the ATECC608A a simple process. For new designs, it is recommended

that customers start directly with the ATECC608B device. For designs that are being upgraded and currently use the

ATECC508A or the ATECC608A, it is recommended that they move to the ATECC608B. For designs not planned to

be upgraded, it is recommended that customers review their designs to see if they would benefit from the enhanced

security of the ATECC608B. For assistance with migrating a design to the ATECC608B, see the Migrations

References section.

For more information on compatibility with other Microchip CryptoAuthentication products, please see Section 3.

Compatibility.

Migration References:

1.

AN3539: Provides guidance on migrating from the ATECC508A to the ATECC608B

2.

AN2237: Provides guidance on migrating from the ATECC608A to the ATECC608B

1.1

Applications

The ATECC608B has a flexible command set that allows use in many applications, including the following:

• Network/IoT Node Endpoint Security

Manages node identity authentication and session key creation and management. Supports the entire

ephemeral session key-generation flow for multiple protocols, including TLS 1.2 (and earlier) and TLS 1.3.

• Secure Boot

Supports the MCU host by validating code digests and optionally enabling communication keys on success.

Various configurations to offer enhanced performance are available.

• Small Message Encryption

Contains a hardware AES engine to encrypt and/or decrypt small messages or data such as PII information.

Supports the AES-ECB mode directly. Other modes can be implemented with the help of the host

microcontroller. There is an additional GFM calculation function to support AES-GCM.

• Key Generation for Software Download

Supports local protected key generation for downloaded images. Both broadcast of one image to many systems,

each with the same decryption key, or point-to-point download of unique images per system are supported.

• Ecosystem Control and Anti-Counterfeiting

Validates that a system or component is authentic and came from the OEM shown on the nameplate.

1.2

Device Features

The ATECC608B includes an EEPROM array which can be used for storage of up to 16 keys, certificates,

miscellaneous read/write, read-only or secret data, consumption logging and security configurations. Access to the

various sections of memory can be restricted in a variety of ways and then the configuration can be locked to prevent

changes.

Access to the device is made through a standard I2C Interface at speeds of up to 1 Mbps. The interface is compatible

with standard Serial EEPROM I2C interface specifications. The device also supports a Single-Wire Interface (SWI),

which can reduce the number of GPIOs required on the system processor, and/or reduce the number of pins on

connectors. If the Single-Wire Interface is enabled, the remaining pin is available for use as a GPIO, an authenticated

output or tamper input.

Each ATECC608B ships with an ensured unique 72-bit serial number. Using the cryptographic protocols supported

by the device, a host system or remote server can verify a signature of the serial number to prove that the serial

ATECC608B

Introduction

© 2020 Microchip Technology Inc.

Summary Datasheet

DS40002239A-page 4