ATECC608B-SSHDA-B - CryptoAuthentication IC, I2C, 8-SOIC | Microchip
N.º de pieza: ATECC608B-SSHDA-B ✓ Activo| Cant. | Precio unitario | Total |
|---|---|---|
| 1 | $1.18 | $1,18 |
| 10 | $1.05 | $10,50 |
| 100 | $0.95 | $95,00 |
| 500 | $0.86 | $430,00 |
| 1.000 | $0.78 | $780,00 |
| 3.000 | $0.69 | $2.070,00 |
ATECC608B-SSHDA-B Descripción general
A cryptographic co-processor is a dedicated hardware block that offloads mathematically intensive security operations from a microcontroller, isolating private keys inside a tamper-resistant silicon boundary so they never appear in host memory. Within the system hierarchy, the ATECC608B sits at the secure-element layer above general-purpose MCUs, complementing TLS software stacks with hardware root-of-trust primitives. Microchip's CryptoAuthLib software library abstracts I2C transactions so designers can issue sign/verify, key agreement, and AES-GCM commands with a few function calls.
Key features include protected storage for up to 16 keys/certificates/data slots, FIPS186-3 ECDSA sign/verify at P-256, NIST SP800-56A ECDH key agreement, AES-128-GCM/ECB encryption/decryption, monotonic counters, and secure boot validation hooks. Each slot has configurable access permissions and can be locked permanently, making the device a turnkey root-of-trust for IoT endpoint authentication, anti-counterfeiting, and IP protection.
The internal architecture pairs a secure EEPROM key store with hardware accelerators for ECDSA, ECDH, AES-128, and SHA-256, all fronted by a true random number generator (TRNG) that meets NIST SP800-22 guidelines. Internal voltage and tamper monitors can zeroize keys on detected glitches, while GPIO with optional secure signal assertions enable host MCU wake-up or LED feedback during provisioning.
Typical applications include IoT node authentication, secure boot validation for Linux/MCU firmware, accessory and consumable anti-cloning, TLS handshake acceleration, message encryption with AES-GCM, and IP/feature enablement for licensed products. Designers add the ATECC608B to existing designs via a 2-wire I2C bus, requiring only VCC, GND, SDA, and SCL pull-ups.
When designing with this device, allocate a unique 7-bit I2C address (factory default is 0x60) and respect the GPIO default-state behavior at power-up. Use Microchip's CryptoAuthLib and the AT88CK590 kit for provisioning and follow the migration guide AN5078 if upgrading from ATECC608A.
Alternativas directas para ATECC608B-SSHDA-B — mismo encapsulado, compatible pin a pin. Se excluyen las piezas de otro encapsulado que requieren retrabajo de la PCB.
Variantes de esta serie
Modelos de la misma serie compatibles directamente con ATECC608B-SSHDA-B (mismo factor de forma y huella) — difiere en Operating Temperature, Package, Tamper Detection.
Herramienta de comparación rápida — seleccione piezas alternativas para compararlas lado a lado:
ATECC608C-SSHDA-B
✅ Sustitución directa📋 Alternativa de referencia (no en el catálogo)
ATECC608B-SSHDA-T
✅ Sustitución directa✓ En stock
$0.5742 / unidad
Ver hoja de datos →ATECC608A-SSHDA-B
✅ Sustitución directa📋 Alternativa de referencia (no en el catálogo)
ATECC608B-MAHDA-T
✅ Sustitución directa📋 Alternativa de referencia (no en el catálogo)
ATECC608B-SSHDA-CRYPTOAUTHENTICATION-FACTORY-LOCKED
✅ Sustitución directa ⚠️ Especificaciones sin verificar📋 Alternativa de referencia (no en el catálogo)
ATECC608B-SSHDA-B Especificaciones
| Device Type | Cryptographic Co-Processor / Secure Element |
| Series | CryptoAuthentication (ATECC608B) |
| Supported Algorithms | ECC-P256 (ECDSA, ECDH), SHA-256, AES-128-GCM/ECB, HMAC-SHA256 |
| Key Storage Slots | Up to 16 keys/certificates/data |
| Communication Interface | I2C (up to 1 Mb/s), GPIO |
| Default I2C Address | 0x60 (7-bit) |
| Operating Voltage | 2.0 V to 5.5 V |
| Standby Current | <150 nA typical (sleep mode) |
| Temperatura de funcionamiento | -40 °C to +85 °C (industrial) |
| Random Number Generator | Hardware TRNG, NIST SP800-22 compliant |
| Tamper Detection | Voltage monitor, glitch detector, secure lock |
| Encapsulado | 8-pin SOIC (3.90 mm body, SOIC-N) |
| Tipo de montaje | Surface Mount |
| Estado RoHS | Compliant |
| Lead-Free | Yes |
| Standards Compliance | FIPS186-3 ECDSA, NIST SP800-56A ECDH, AES-128 FIPS-197 |
Configuración de pines de ATECC608B-SSHDA-B
| Pin 1 | NC — No Connect (per Microchip datasheet DS40002239B) |
| Pin 2 | SDA — I2C Serial Data (open-drain, requires pull-up) |
| Pin 3 | NC — No Connect (per datasheet) |
| Pin 4 | GND — Ground reference |
| Pin 5 | SCL — I2C Serial Clock (open-drain, requires pull-up) |
| Pin 6 | NC — No Connect (per datasheet) |
| Pin 7 | GPIO — General-purpose IO / address strap / default-state wake signal |
| Pin 8 | VCC — Power supply, 2.0 V to 5.5 V |
Aplicaciones típicas
ATECC608B-SSHDA-B es adecuado para 8 aplicacións: IoT Endpoint Device Authentication, Secure Boot for MCU/Linux Firmware, Accessory and Consumable Anti-Counterfeiting, TLS Handshake Acceleration with ECDH Key Agreement, Message Encryption with AES-128-GCM, IP Protection and Feature Enablement, Medical Device Authentication and Data Integrity, Smart Home and Building Automation Security.
IoT Endpoint Device Authentication
The ATECC608B-SSHDA-B is purpose-built for authenticating IoT nodes to cloud platforms using ECDSA signatures and X.509 certificates provisioned into its 16 hardware-protected slots. Per Microchip's datasheet (DS40002239B), each node receives a unique private key generated on-chip during provisioning, and the AWS IoT, Azure IoT, and Google Cloud IoT Core attestation flows all reference the ATECC608B by name. Placing one ATECC608B per node adds less than $0.70 in BOM at volume while replacing a software TLS stack's secret-key exposure risk. The 2.0-5.5 V supply lets it run directly from a 3.3 V or 5 V MCU rail without level shifting.
Recomendado
Secure Boot for MCU/Linux Firmware
In secure-boot designs, the ATECC608B-SSHDA-B validates firmware signatures before the host MCU/Linux SoC executes code, closing the gap where an attacker could flash malicious firmware. Per Microchip's summary datasheet (DS40002239B), the device's ECDSA-P256 verification engine returns a yes/no answer in milliseconds, fast enough for cold-boot gating of the main application. A signed firmware image is stored in external flash; the bootloader reads it, sends the digest + signature to the ATECC608B over I2C, and only continues on a positive verify. The 8-SOIC footprint drops onto any MCU reference board's I2C bus, requiring no extra GPIOs.
Recomendado
Accessory and Consumable Anti-Counterfeiting
Printers, medical devices, and industrial consumables use the ATECC608B-SSHDA-B to authenticate genuine accessories via ECDSA challenge-response. According to Microchip's product documentation, the host device generates a random nonce, sends it to the consumable's ATECC608B, and the chip signs it with its private key - a clone lacking the private key fails this ECDSA-P256 challenge. Each ATECC608B ships with a unique 72-bit serial number, and the 16 key slots allow multiple OEMs to share the same silicon design across product lines. The 8-SOIC package drops onto a 4-wire cable-end PCB with no extra components besides decoupling caps.
Recomendado
TLS Handshake Acceleration with ECDH Key Agreement
In TLS 1.2/1.3 handshakes, the ATECC608B-SSHDA-B performs ECDH key agreement in hardware, offloading the most CPU-intensive step from the host MCU. Per Microchip's application notes (DS40002239B), an ECDH-P256 operation completes in tens of milliseconds versus hundreds on a Cortex-M0 without crypto acceleration, freeing the host to run other TLS housekeeping. The AES-128-GCM engine further accelerates bulk data encryption after the handshake, and the hardware TRNG feeds the session's ephemeral keys. The device's <150 nA standby current suits battery-powered IoT nodes that handshake only a few times per day.
Recomendado
Message Encryption with AES-128-GCM
Beyond authentication, the ATECC608B-SSHDA-B's AES-128 hardware block encrypts/decrypts sensitive payloads in OCB, CCM, or GCM modes with authenticated encryption. According to Microchip's datasheet (DS40002239B), the AES engine returns ciphertext within microseconds and frees the host MCU for application logic - critical for resource-constrained Cortex-M0+/PIC16 designs. Designers use a single device to store the symmetric key, run ECDH to derive a session key, and then switch to AES-GCM for bulk data confidentiality and integrity. The 8-SOIC package and 2-5.5 V supply fit legacy 5 V industrial control boards.
Recomendado
IP Protection and Feature Enablement
OEMs use the ATECC608B-SSHDA-B to enable premium features only on licensed hardware by storing feature-permission bits in locked EEPROM slots. Per Microchip's product documentation, the host queries the ATECC608B at boot to check whether a particular feature is licensed for the unit's serial number; if not, the application disables the corresponding UI/mode. Because the ATECC608B's slots are hardware-protected and one-way-lockable, end users cannot patch the license file as they would a software key. The 8-SOIC footprint integrates onto the main board without consuming extra PCB area, and the 2.0-5.5 V supply matches any standard logic rail.
Recomendado
Medical Device Authentication and Data Integrity
Medical devices such as glucose meters, infusion pumps, and diagnostic cartridges embed the ATECC608B-SSHDA-B to authenticate genuine test strips and to sign measurement logs for regulatory traceability. Per Microchip's datasheet (DS40002239B), the device's ECDSA-P256 signatures and SHA-256 hash engine create tamper-evident audit trails that satisfy FDA cybersecurity guidance for connected medical devices. The hardware TRNG provides non-deterministic signatures even when the host's clock is jittered, and the lockable key slots prevent attackers from extracting signing keys for replay attacks. The 8-SOIC package and -40 to +85 °C range suit point-of-care instruments and hospital-bedside carts.
Recomendado
Smart Home and Building Automation Security
Smart locks, security cameras, and HVAC controllers add the ATECC608B-SSHDA-B to establish a hardware root of trust that resists physical tampering attacks. According to Microchip's product family documentation, the chip's internal voltage/glitch monitors zeroize keys on detected fault injection, while the hardware TRNG prevents attackers from replaying old challenges to bypass authentication. Cloud provisioning is simplified because each ATECC608B ships with a unique 72-bit serial number that AWS IoT Just-in-Time-Provisioning can map to a digital twin on first boot. The 8-SOIC footprint is friendly to Wi-Fi module reference designs and the 2.0-5.5 V supply works directly from a 3.3 V LDO.
Recomendado
Resumen de productos recomendados
Datos de referencia de ingeniería para ATECC608B-SSHDA-B — comparación, orientación de diseño e información de cumplimiento.
Guía de selección
Comparación con alternativas
| Parámetro | Este producto | ATECC608C-SSHDA-B | ATECC608B-SSHDA-T | ATECC608A-SSHDA-B | ATECC608B-MAHDA-T |
|---|---|---|---|---|---|
| Brand | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology |
| Package | 8-SOIC (3.90 mm) | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same |
| Cryptographic Algorithms | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same) | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same die) | ECC-P256 ECDSA + ECDH, AES-128, SHA-256 (no GCM) | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same die) |
| I2C Address (default) | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 (factory-configurable) |
| Operating Voltage | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V |
| Key Storage Slots | 16 | 16 | 16 | 16 | 16 |
| Provisioning | Default factory (customer locks) | Default factory | Default factory (tape and reel) | Default factory (legacy gen) | Factory-configured per customer |
Diferenciadores clave
- Hardware ECDSA + ECDH + AES-128-GCM in a single SOIC (frente a ATECC608A-SSHDA-B)
- Drop-in compatible with newer ATECC608C generation (frente a ATECC608C-SSHDA-B)
- Same SOIC die, customer-specific provisioning variants available (frente a ATECC608B-MAHDA-T)
Notas de diseño
Place the ATECC608B-SSHDA-B as close to the host MCU as practical to keep the I2C bus short and reduce EMI susceptibility. According to Microchip's I2C design guidance, SDA and SCL pull-up resistors should be sized for the bus capacitance - typically 2.2 kΩ to 4.7 kΩ for 3.3 V with a 100 kHz clock and a few inches of trace. Add 100 nF + 1 µF decoupling caps within a few millimeters of pin 8 (VCC).
Do not leave GPIO (pin 7) floating - it is a multi-purpose pin used as a default-state wake/strap and must be tied to VCC or GND via a resistor to set the desired idle behavior at power-up. Per Microchip's datasheet, floating GPIO can cause indeterminate I2C address selection on certain ATECC608B revisions. Designers should also confirm the host's I2C bus voltage matches VCC, since the ATECC608B's SDA/SCL are not 5 V tolerant on 3.3 V VCC parts.
The ATECC608B-SSHDA-B has a sub-150 nA standby current, making it suitable for battery-powered IoT endpoints. During active ECDSA sign operations the device draws a few mA for milliseconds, so a 100 nF decoupling cap on VCC plus a 1 µF bulk cap handles the transient without dipping the host rail. Estimated: at 3.3 V and 3 mA active for 30 ms, average current over a 1-hour handshake interval is <150 nA dominated by sleep.
Microchip's reference designs place a 4.7 kΩ I2C pull-up on both SDA and SCL when running at 100 kHz, and reduce to 2.2 kΩ for 400 kHz Fast-Mode and 1 MHz Fast-Mode Plus. Per Microchip app note guidance, if the bus length exceeds ~10 cm, consider splitting the pull-ups or using a stronger driver. Series resistors (e.g. 33 Ω) on SDA/SCL near the ATECC608B can reduce ringing on long buses but should not be needed in most designs.
Información de cumplimiento
RoHS and REACH compliance confirmed per Microchip product page. The ATECC608B-SSHDA-B is not AEC-Q100 qualified - for automotive secure-element applications, use the automotive-graded ATECC608B-MAHAW or ATECC608B-MAHCZ variants. Halogen-free status not explicitly stated in the retrieved data.
