ATSHA204A datasheet(6/93 Pages) MICROCHIP

6 / 93 page

Using the Single-Wire Interface, multiple ATSHA204A devices can share the same bus, which saves

processor GPIO usage in systems with multiple clients such as different color ink tanks or multiple spare

parts, as examples. See Section Sharing the Interface and Section Pause Command for details on how

this is implemented.

Each ATSHA204A ships with a guaranteed unique 9-byte (72-bit) serial number. Using the cryptographic

protocols supported by the device, a Host system or remote server can prove that the serial number is

authentic and is not a copy. Serial numbers are often stored in a standard Serial EEPROM, which can be

easily copied with no way for the Host to know if the serial number is authentic or if it is a clone. The

entire serial number must be utilized to guarantee uniqueness.

The ATSHA204A can generate high-quality random numbers and employ them for any purpose, including

as part of the crypto protocols of this device. Because each 32-byte (256-bit) random number is not

dependent on past numbers generated on this or any other device, their inclusion in the protocol

calculation ensures that replay attacks (for instance. re-transmitting a previously successful transaction)

always fail. See Section Random Number Generator (RNG) and Section Random Command.

System integration is made easy by a wide supply voltage range (of 2.0V through 5.5V) and an ultra-low

sleep current (of <150 nA). Complete DC parameters are found in Section Electrical Characteristics,

which describes multiple package options, including a tiny UDFN package with a footprint of only 2.0 mm

x 3.0 mm. See Section Package Drawings for more details and ordering codes.

See Section Compatibility for information regarding compatibility with the Microchip ATSHA204.

1.3

Cryptographic Operation

The ATSHA204A supports a standard challenge-response protocol to simplify programming. In its most

basic installation, the Host system sends a challenge (for example a number) to the device in the Client,

which combines that challenge with a secret key by using the Message Authentication Code

(MAC) command from the system, as described in Section MAC Command and sends that response

back to the system. The device uses a cryptographic hash algorithm to make that combination (which is

also known as a digest). The use of a hash algorithm prevents an observer on the bus from deriving the

value of the secret key, while allowing the recipient to verify that the response is correct by performing the

same calculation combining the challenge with the secret to create a digest using a stored copy of the

secret.

This basic operation can be expanded in many ways because of the flexible command set of the

ATSHA204A. By using the GenDig command (Section GenDig Command), the values in other slots can

be included in the response digest, which provides an effective way of proving that a data read really did

come from the device, as opposed to being inserted by a man-in-the-middle attacker. This same

command can be used to combine two keys with the challenge, which is useful when there are multiple

layers of authentication to be performed.

The DeriveKey command (Section DeriveKey Command) implements a key rolling scheme.

Depending upon the command mode parameter, the resulting operation can be similar to that

implemented in a remote-controlled garage door opener, for example. Each time the key is used, the

current value of the key is cryptographically combined with a value specific to that system and that result

then forms the key for the next cryptographic operation. Even if an attacker obtains the value of one key,

that key disappears forever with the next use.

DeriveKey can also be used to generate new random keys that might be valid only for a particular Host

ID, for a particular time period, or for some other restricted condition. Each generated key is different from

ATSHA204A

Introduction

DS40002025A-page 6

ATSHA204A датащи(PDF) 6 Page - Microchip Technology

ATSHA204A датащи(HTML) 6 Page - Microchip Technology

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93

датащи скачать

ссылки URL