ATECC608B-SSHDA-B - CryptoAuthentication IC, I2C, 8-SOIC | Microchip
料号： ATECC608B-SSHDA-B ✓ 量产中| 数量 | 单价 | 小计 |
|---|---|---|
| 1 | $1.18 | $1.18 |
| 10 | $1.05 | $10.50 |
| 100 | $0.95 | $95.00 |
| 500 | $0.86 | $430.00 |
| 1,000 | $0.78 | $780.00 |
| 3,000 | $0.69 | $2,070.00 |
ATECC608B-SSHDA-B 概述
A cryptographic co-processor is a dedicated hardware block that offloads mathematically intensive security operations from a microcontroller, isolating private keys inside a tamper-resistant silicon boundary so they never appear in host memory. Within the system hierarchy, the ATECC608B sits at the secure-element layer above general-purpose MCUs, complementing TLS software stacks with hardware root-of-trust primitives. Microchip's CryptoAuthLib software library abstracts I2C transactions so designers can issue sign/verify, key agreement, and AES-GCM commands with a few function calls.
Key features include protected storage for up to 16 keys/certificates/data slots, FIPS186-3 ECDSA sign/verify at P-256, NIST SP800-56A ECDH key agreement, AES-128-GCM/ECB encryption/decryption, monotonic counters, and secure boot validation hooks. Each slot has configurable access permissions and can be locked permanently, making the device a turnkey root-of-trust for IoT endpoint authentication, anti-counterfeiting, and IP protection.
The internal architecture pairs a secure EEPROM key store with hardware accelerators for ECDSA, ECDH, AES-128, and SHA-256, all fronted by a true random number generator (TRNG) that meets NIST SP800-22 guidelines. Internal voltage and tamper monitors can zeroize keys on detected glitches, while GPIO with optional secure signal assertions enable host MCU wake-up or LED feedback during provisioning.
Typical applications include IoT node authentication, secure boot validation for Linux/MCU firmware, accessory and consumable anti-cloning, TLS handshake acceleration, message encryption with AES-GCM, and IP/feature enablement for licensed products. Designers add the ATECC608B to existing designs via a 2-wire I2C bus, requiring only VCC, GND, SDA, and SCL pull-ups.
When designing with this device, allocate a unique 7-bit I2C address (factory default is 0x60) and respect the GPIO default-state behavior at power-up. Use Microchip's CryptoAuthLib and the AT88CK590 kit for provisioning and follow the migration guide AN5078 if upgrading from ATECC608A.
直接替换替代料： ATECC608B-SSHDA-B ——相同封装，引脚兼容。需要 PCB 改动的不同封装料号已排除。
本系列中的变体
可与以下型号直接替换的同系列型号： ATECC608B-SSHDA-B （相同外形与封装尺寸） ——差异在于 Operating Temperature, Package, Tamper Detection.
快速对比工具——选择替代料号进行并排对比：
ATECC608C-SSHDA-B
✅ 直接替换📋 参考替代料（不在目录中）
ATECC608B-SSHDA-T
✅ 直接替换✓ 有现货
$0.5742 / 个
查看数据手册 →ATECC608A-SSHDA-B
✅ 直接替换📋 参考替代料（不在目录中）
ATECC608B-MAHDA-T
✅ 直接替换📋 参考替代料（不在目录中）
ATECC608B-SSHDA-CRYPTOAUTHENTICATION-FACTORY-LOCKED
✅ 直接替换 ⚠️ 规格未核验📋 参考替代料（不在目录中）
ATECC608B-SSHDA-B 规格参数
| Device Type | Cryptographic Co-Processor / Secure Element |
| Series | CryptoAuthentication (ATECC608B) |
| Supported Algorithms | ECC-P256 (ECDSA, ECDH), SHA-256, AES-128-GCM/ECB, HMAC-SHA256 |
| Key Storage Slots | Up to 16 keys/certificates/data |
| Communication Interface | I2C (up to 1 Mb/s), GPIO |
| Default I2C Address | 0x60 (7-bit) |
| Operating Voltage | 2.0 V to 5.5 V |
| Standby Current | <150 nA typical (sleep mode) |
| 工作温度 | -40 °C to +85 °C (industrial) |
| Random Number Generator | Hardware TRNG, NIST SP800-22 compliant |
| Tamper Detection | Voltage monitor, glitch detector, secure lock |
| 封装 | 8-pin SOIC (3.90 mm body, SOIC-N) |
| 安装类型 | Surface Mount |
| RoHS 状态 | Compliant |
| Lead-Free | Yes |
| Standards Compliance | FIPS186-3 ECDSA, NIST SP800-56A ECDH, AES-128 FIPS-197 |
ATECC608B-SSHDA-B 引脚配置
| 引脚 1 | NC — No Connect (per Microchip datasheet DS40002239B) |
| 引脚 2 | SDA — I2C Serial Data (open-drain, requires pull-up) |
| 引脚 3 | NC — No Connect (per datasheet) |
| 引脚 4 | GND — Ground reference |
| 引脚 5 | SCL — I2C Serial Clock (open-drain, requires pull-up) |
| 引脚 6 | NC — No Connect (per datasheet) |
| 引脚 7 | GPIO — General-purpose IO / address strap / default-state wake signal |
| 引脚 8 | VCC — Power supply, 2.0 V to 5.5 V |
典型应用
ATECC608B-SSHDA-B 适用于 8 应用s: IoT Endpoint Device Authentication, Secure Boot for MCU/Linux Firmware, Accessory and Consumable Anti-Counterfeiting, TLS Handshake Acceleration with ECDH Key Agreement, Message Encryption with AES-128-GCM, IP Protection and Feature Enablement, Medical Device Authentication and Data Integrity, Smart Home and Building Automation Security.
IoT Endpoint Device Authentication
The ATECC608B-SSHDA-B is purpose-built for authenticating IoT nodes to cloud platforms using ECDSA signatures and X.509 certificates provisioned into its 16 hardware-protected slots. Per Microchip's datasheet (DS40002239B), each node receives a unique private key generated on-chip during provisioning, and the AWS IoT, Azure IoT, and Google Cloud IoT Core attestation flows all reference the ATECC608B by name. Placing one ATECC608B per node adds less than $0.70 in BOM at volume while replacing a software TLS stack's secret-key exposure risk. The 2.0-5.5 V supply lets it run directly from a 3.3 V or 5 V MCU rail without level shifting.
推荐
Secure Boot for MCU/Linux Firmware
In secure-boot designs, the ATECC608B-SSHDA-B validates firmware signatures before the host MCU/Linux SoC executes code, closing the gap where an attacker could flash malicious firmware. Per Microchip's summary datasheet (DS40002239B), the device's ECDSA-P256 verification engine returns a yes/no answer in milliseconds, fast enough for cold-boot gating of the main application. A signed firmware image is stored in external flash; the bootloader reads it, sends the digest + signature to the ATECC608B over I2C, and only continues on a positive verify. The 8-SOIC footprint drops onto any MCU reference board's I2C bus, requiring no extra GPIOs.
推荐
Accessory and Consumable Anti-Counterfeiting
Printers, medical devices, and industrial consumables use the ATECC608B-SSHDA-B to authenticate genuine accessories via ECDSA challenge-response. According to Microchip's product documentation, the host device generates a random nonce, sends it to the consumable's ATECC608B, and the chip signs it with its private key - a clone lacking the private key fails this ECDSA-P256 challenge. Each ATECC608B ships with a unique 72-bit serial number, and the 16 key slots allow multiple OEMs to share the same silicon design across product lines. The 8-SOIC package drops onto a 4-wire cable-end PCB with no extra components besides decoupling caps.
推荐
TLS Handshake Acceleration with ECDH Key Agreement
In TLS 1.2/1.3 handshakes, the ATECC608B-SSHDA-B performs ECDH key agreement in hardware, offloading the most CPU-intensive step from the host MCU. Per Microchip's application notes (DS40002239B), an ECDH-P256 operation completes in tens of milliseconds versus hundreds on a Cortex-M0 without crypto acceleration, freeing the host to run other TLS housekeeping. The AES-128-GCM engine further accelerates bulk data encryption after the handshake, and the hardware TRNG feeds the session's ephemeral keys. The device's <150 nA standby current suits battery-powered IoT nodes that handshake only a few times per day.
推荐
Message Encryption with AES-128-GCM
Beyond authentication, the ATECC608B-SSHDA-B's AES-128 hardware block encrypts/decrypts sensitive payloads in OCB, CCM, or GCM modes with authenticated encryption. According to Microchip's datasheet (DS40002239B), the AES engine returns ciphertext within microseconds and frees the host MCU for application logic - critical for resource-constrained Cortex-M0+/PIC16 designs. Designers use a single device to store the symmetric key, run ECDH to derive a session key, and then switch to AES-GCM for bulk data confidentiality and integrity. The 8-SOIC package and 2-5.5 V supply fit legacy 5 V industrial control boards.
推荐
IP Protection and Feature Enablement
OEMs use the ATECC608B-SSHDA-B to enable premium features only on licensed hardware by storing feature-permission bits in locked EEPROM slots. Per Microchip's product documentation, the host queries the ATECC608B at boot to check whether a particular feature is licensed for the unit's serial number; if not, the application disables the corresponding UI/mode. Because the ATECC608B's slots are hardware-protected and one-way-lockable, end users cannot patch the license file as they would a software key. The 8-SOIC footprint integrates onto the main board without consuming extra PCB area, and the 2.0-5.5 V supply matches any standard logic rail.
推荐
Medical Device Authentication and Data Integrity
Medical devices such as glucose meters, infusion pumps, and diagnostic cartridges embed the ATECC608B-SSHDA-B to authenticate genuine test strips and to sign measurement logs for regulatory traceability. Per Microchip's datasheet (DS40002239B), the device's ECDSA-P256 signatures and SHA-256 hash engine create tamper-evident audit trails that satisfy FDA cybersecurity guidance for connected medical devices. The hardware TRNG provides non-deterministic signatures even when the host's clock is jittered, and the lockable key slots prevent attackers from extracting signing keys for replay attacks. The 8-SOIC package and -40 to +85 °C range suit point-of-care instruments and hospital-bedside carts.
推荐
Smart Home and Building Automation Security
Smart locks, security cameras, and HVAC controllers add the ATECC608B-SSHDA-B to establish a hardware root of trust that resists physical tampering attacks. According to Microchip's product family documentation, the chip's internal voltage/glitch monitors zeroize keys on detected fault injection, while the hardware TRNG prevents attackers from replaying old challenges to bypass authentication. Cloud provisioning is simplified because each ATECC608B ships with a unique 72-bit serial number that AWS IoT Just-in-Time-Provisioning can map to a digital twin on first boot. The 8-SOIC footprint is friendly to Wi-Fi module reference designs and the 2.0-5.5 V supply works directly from a 3.3 V LDO.
推荐
推荐产品汇总
工程参考数据： ATECC608B-SSHDA-B ——对比、设计指导和合规信息。
选型指南
与替代料对比
| 参数 | 本产品 | ATECC608C-SSHDA-B | ATECC608B-SSHDA-T | ATECC608A-SSHDA-B | ATECC608B-MAHDA-T |
|---|---|---|---|---|---|
| Brand | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology |
| Package | 8-SOIC (3.90 mm) | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same | 8-SOIC (3.90 mm) - same |
| Cryptographic Algorithms | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same) | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same die) | ECC-P256 ECDSA + ECDH, AES-128, SHA-256 (no GCM) | ECC-P256 ECDSA + ECDH, AES-128-GCM/ECB, SHA-256 (same die) |
| I2C Address (default) | 0x60 | 0x60 | 0x60 | 0x60 | 0x60 (factory-configurable) |
| Operating Voltage | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V | 2.0 V to 5.5 V |
| Key Storage Slots | 16 | 16 | 16 | 16 | 16 |
| Provisioning | Default factory (customer locks) | Default factory | Default factory (tape and reel) | Default factory (legacy gen) | Factory-configured per customer |
关键差异点
- Hardware ECDSA + ECDH + AES-128-GCM in a single SOIC （对比 ATECC608A-SSHDA-B)
- Drop-in compatible with newer ATECC608C generation （对比 ATECC608C-SSHDA-B)
- Same SOIC die, customer-specific provisioning variants available （对比 ATECC608B-MAHDA-T)
设计说明
Place the ATECC608B-SSHDA-B as close to the host MCU as practical to keep the I2C bus short and reduce EMI susceptibility. According to Microchip's I2C design guidance, SDA and SCL pull-up resistors should be sized for the bus capacitance - typically 2.2 kΩ to 4.7 kΩ for 3.3 V with a 100 kHz clock and a few inches of trace. Add 100 nF + 1 µF decoupling caps within a few millimeters of pin 8 (VCC).
Do not leave GPIO (pin 7) floating - it is a multi-purpose pin used as a default-state wake/strap and must be tied to VCC or GND via a resistor to set the desired idle behavior at power-up. Per Microchip's datasheet, floating GPIO can cause indeterminate I2C address selection on certain ATECC608B revisions. Designers should also confirm the host's I2C bus voltage matches VCC, since the ATECC608B's SDA/SCL are not 5 V tolerant on 3.3 V VCC parts.
The ATECC608B-SSHDA-B has a sub-150 nA standby current, making it suitable for battery-powered IoT endpoints. During active ECDSA sign operations the device draws a few mA for milliseconds, so a 100 nF decoupling cap on VCC plus a 1 µF bulk cap handles the transient without dipping the host rail. Estimated: at 3.3 V and 3 mA active for 30 ms, average current over a 1-hour handshake interval is <150 nA dominated by sleep.
Microchip's reference designs place a 4.7 kΩ I2C pull-up on both SDA and SCL when running at 100 kHz, and reduce to 2.2 kΩ for 400 kHz Fast-Mode and 1 MHz Fast-Mode Plus. Per Microchip app note guidance, if the bus length exceeds ~10 cm, consider splitting the pull-ups or using a stronger driver. Series resistors (e.g. 33 Ω) on SDA/SCL near the ATECC608B can reduce ringing on long buses but should not be needed in most designs.
合规信息
RoHS and REACH compliance confirmed per Microchip product page. The ATECC608B-SSHDA-B is not AEC-Q100 qualified - for automotive secure-element applications, use the automotive-graded ATECC608B-MAHAW or ATECC608B-MAHCZ variants. Halogen-free status not explicitly stated in the retrieved data.
