ATECC608B-SSHDA-T - CryptoAuthentication IC, SOIC-8 | Microchip
料号： ATECC608B-SSHDA-T ✗ 停产| 数量 | 单价 | 小计 |
|---|---|---|
| 1 | $0.9844 | $0.98 |
| 10 | $0.7109 | $7.11 |
| 100 | $0.6289 | $62.89 |
| 500 | $0.6016 | $300.80 |
| 1,000 | $0.5742 | $574.20 |
ATECC608B-SSHDA-T 概述
What is a CryptoAuthentication IC? A CryptoAuthentication IC is a specialized secure element that offloads cryptographic operations from the main microcontroller and protects private keys in hardware-isolated storage. These devices sit at the foundation of the security hierarchy: CryptoAuthentication IC → secure element → hardware root-of-trust → embedded security subsystem. Unlike software-based cryptography, hardware secure elements ensure private keys never leave the silicon, dramatically reducing attack surface for IoT devices, network accessories, and edge nodes where MCU resources are limited but trust is non-negotiable.
The ATECC608B features a full ECDH/ECDSA engine operating in approximately 13 ms for sign operations and SHA-256/HMAC hardware acceleration, dramatically reducing cryptographic workload on host MCUs. It supports standard I²C up to 1 Mbps with configurable I²C addresses, an optional single-wire interface (SWI) variant, and operates from 2.0V to 5.5V supply with deep-sleep current as low as <150 nA. Internal EEPROM is locked through one-way fuses, preventing post-deployment firmware or key extraction by physical or remote attacks.
Typical applications include Matter/Thread device authentication, secure boot for Linux/Windows IoT edge nodes, AWS IoT multi-account registration, IP protection and firmware anti-cloning, accessory and consumable authentication (medical, industrial, printer cartridges), and TLS 1.2/1.3 mutual authentication offload for resource-constrained MCUs. The device ships with Microchip's CryptoAuthLib, which provides a unified API across the entire CryptoAuthentication family.
When designing with the ATECC608B, ensure I²C pull-ups are present (the SOIC version uses standard I²C, not SWI), allocate a dedicated 7-bit I²C address, and provision keys via the Microchip CryptoEvaluation kit during development. The GPIO pin can be used as a power-on reset indicator or wake source. Migration from ATECC608A is software-compatible via CryptoAuthLib.
This page synthesizes distributor pricing, drop-in same-package alternatives, and practical design notes not consolidated in the manufacturer datasheet alone.
直接替换替代料： ATECC608B-SSHDA-T ——相同封装，引脚兼容。需要 PCB 改动的不同封装料号已排除。
本系列中的变体
可与以下型号直接替换的同系列型号： ATECC608B-SSHDA-T （相同外形与封装尺寸） ——差异在于 Operating Temperature, Package, Tamper Detection.
快速对比工具——选择替代料号进行并排对比：
ATECC608B-SSHDA-B
✓ 有现货
$0.69 / 个
查看数据手册 →ATECC608A-SSHDA-T
📋 参考替代料（不在目录中）
ATECC108A-SSHDA-T
📋 参考替代料（不在目录中）
ATECC508A-SSHDA-T
📋 参考替代料（不在目录中）
ATECC608B-TCSMS
📋 参考替代料（不在目录中）
ATECC608B-MAHDA-T
📋 参考替代料（不在目录中）
ATECC608B-SSHDA-T 规格参数
| Product Type | CryptoAuthentication IC / Hardware Security Module |
| Family | CryptoAuthentication (ATECC608B) |
| Cryptographic Algorithms | ECC-P256 (ECDH, ECDSA), SHA-256, HMAC, AES-128-GCM |
| Key Storage | 10Kb secure EEPROM (hardware-isolated) |
| Hardware RNG | NIST SP 800-22 compliant |
| 接口 | I²C, up to 1 Mbps |
| I²C Address | Configurable (default 0x60) |
| 电源电压 | 2.0V to 5.5V |
| Active Current | 3 mA typical during ECDSA operation |
| Deep Sleep Current | <150 nA |
| 封装 | 8-pin SOIC (SSHDA), Tape & Reel |
| 工作温度 | -40°C to +85°C (industrial) |
| ECDH/ECDSA Sign Time | ~13 ms typical |
| Tamper Detection | Voltage glitch and temperature tamper |
| GPIO | 1 (general-purpose / interrupt) |
| RoHS 状态 | Compliant |
| 生命周期状态 | Not Recommended for new designs (per Microchip product page) |
ATECC608B-SSHDA-T 引脚配置
| 引脚 1 | NC — Not connected (per datasheet); leave floating or to GND |
| 引脚 2 | NC — Not connected (per datasheet); leave floating or to GND |
| 引脚 3 | NC — Not connected (per datasheet); leave floating or to GND |
| 引脚 4 | GND — Ground reference |
| 引脚 5 | SDA — I²C data; requires external pull-up to VCC |
| 引脚 6 | SCL — I²C clock; requires external pull-up to VCC |
| 引脚 7 | GPIO — General-purpose I/O / interrupt output (optional use) |
| 引脚 8 | VCC — Supply voltage, 2.0V to 5.5V |
典型应用
ATECC608B-SSHDA-T 适用于 6 应用s: Matter / Thread Device Authentication, Secure Boot for Linux IoT Edge Gateways, Accessory and Consumable Authentication, Network Equipment Secure Authentication, Firmware Anti-Cloning and IP Protection, TLS 1.3 Mutual Authentication Offload.
Matter / Thread Device Authentication
The ATECC608B-SSHDA-T is one of the most widely deployed secure elements for Matter-compliant IoT commissioning. Its ECC-P256 engine handles the Device Attestation Certificate (DAC) signing in approximately 13 ms per operation, while the 10Kb secure EEPROM stores the Node Operational Certificate (NOC), DAC private key, and Matter fabric credentials. The hardware RNG (NIST SP 800-22) generates the per-device ephemeral keys required by the Matter attestation flow. Operating from 2.0V to 5.5V, the ATECC608B directly interfaces with both 3.3V Thread RCP MCUs and 5V legacy hubs without level shifters. CryptoAuthLib provides a unified API across Thread, Wi-Fi, and Ethernet Matter nodes, simplifying multi-platform Matter SDK integration while preserving the hardware root-of-trust.
推荐
Secure Boot for Linux IoT Edge Gateways
In Linux-based edge gateways (Raspberry Pi-class, industrial gateways running Yocto or Buildroot), the ATECC608B-SSHDA-T enforces hardware root-of-trust at boot. The host CPU reads the TPM-style PCR measurements from the ATECC608B and verifies signed kernel images against public keys stored in the device's secure EEPROM. Because the ATECC608B's private keys never leave the silicon, even a root-level OS compromise cannot extract the signing keys. The I²C interface runs at up to 1 Mbps, enabling sub-second boot-time attestation. With voltage-glitch and temperature tamper detection, the ATECC608B resists physical attacks during field deployment of industrial IoT gateways.
推荐
Accessory and Consumable Authentication
Printers, medical devices, and industrial fluid cartridges use the ATECC608B-SSHDA-T to verify that consumables are OEM-genuine. The host authenticates the cartridge's ATECC608B via ECDH key exchange, after which the secure element signs a random nonce using ECDSA. A successful signature verify proves the consumable is authentic and prevents counterfeit refills. The ATECC608B's deep-sleep current below 150 nA ensures consumable batteries last the full shelf life, while the wide 2.0V-5.5V supply tolerates the voltage droop of nearly-drained primary cells. The 10Kb EEPROM stores OEM certificate chains, batch counters, and expiry dates inside tamper-resistant hardware.
推荐
Network Equipment Secure Authentication
Routers, switches, and 5G small cells use the ATECC608B-SSHDA-T to authenticate peripheral modules like SFP transceivers, line cards, and antennas. Each module contains an ATECC608B provisioned with a unique X.509 certificate; the chassis validates the certificate chain before allowing the module to join the backplane. This prevents counterfeit SFPs that could compromise data plane integrity. The ATECC608B's 13 ms ECDSA sign time keeps the chassis bring-up time minimal, and its wide supply range (2.0V-5.5V) operates directly from typical 3.3V and 5V SFP cages. The hardware RNG ensures every module has a unique key pair, even in high-volume manufacturing.
推荐
Firmware Anti-Cloning and IP Protection
Industrial control systems, PLCs, and motor drives embed the ATECC608B-SSHDA-T to protect proprietary firmware from cloning. At first boot, the MCU reads a per-device secret from the ATECC608B and uses it to decrypt firmware stored in external flash. Without the correct ATECC608B, the firmware returns garbage data and refuses to run, even if the flash contents are dumped and copied to a clone. The 10Kb EEPROM stores per-customer license keys, entitlement counters, and expiry timestamps that the MCU queries on each boot. The ATECC608B's voltage-glitch detection resists simple fault-injection attacks that bypass microcontroller fuses.
推荐
TLS 1.3 Mutual Authentication Offload
Resource-constrained MCUs running mbedTLS or wolfSSL can offload TLS 1.3 mutual authentication to the ATECC608B-SSHDA-T. The private key never leaves the ATECC608B; instead, the host sends a TLS ServerHello hash to the secure element, which signs it with ECDSA and returns the signature. This protects the long-term device identity key even if the host MCU firmware is compromised. The ATECC608B's 13 ms ECDSA sign time is competitive with software mbedTLS on Cortex-M0+ cores while reducing flash/RAM footprint by 50-80 KB. Its low 3 mA active current is negligible compared to typical Wi-Fi radios, and the <150 nA sleep current enables years of battery life in standby.
推荐
推荐产品汇总
工程参考数据： ATECC608B-SSHDA-T ——对比、设计指导和合规信息。
选型指南
与替代料对比
| 参数 | 本产品 | ATECC608B-SSHDA-B | ATECC608A-SSHDA-T | ATECC108A-SSHDA-T | ATECC508A-SSHDA-T | ATECC608B-TCSMS |
|---|---|---|---|---|---|---|
| Package | SOIC-8 (SSHDA) | SOIC-8 - same | SOIC-8 - same | SOIC-8 - same | SOIC-8 - same | SOIC-8 - same |
| Brand | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology |
| ECC Engine | ECC-P256 (ECDH + ECDSA) | ECC-P256 (same) | ECC-P256 (same) | No ECC (SHA-256 only) | ECC-P256 (same) | ECC-P256 (same) |
| AES-128 Acceleration | AES-128-GCM | AES-128-GCM | AES-128 (no GCM) | No AES | AES-128 (no GCM) | AES-128-GCM |
| Tamper Detection | Voltage glitch + temperature | Voltage glitch + temperature | Voltage glitch only | Basic | Voltage glitch only | Voltage glitch + temperature |
| Secure EEPROM | 10 Kb | 10 Kb | 10 Kb | 10 Kb | 10 Kb | 10 Kb |
| Supply Voltage | 2.0V to 5.5V | 2.0V to 5.5V | 2.0V to 5.5V | 2.0V to 5.5V | 2.0V to 5.5V | 2.0V to 5.5V |
| Pre-Provisioned Service | No (blank, customer provisions) | No (blank) | No (blank) | No (blank) | No (blank) | Yes - TrustCUSTOM |
| Unit Price (1 pc, USD, as of 2026-10-07) | 0.71 | 0.71 | 0.55 | 0.48 | 0.45 | 0.95 |
关键差异点
- Enhanced tamper detection vs ATECC608A （对比 ATECC608A-SSHDA-T)
- AES-128-GCM hardware acceleration （对比 ATECC508A-SSHDA-T)
- Backward compatible with ATECC608A pinout （对比 ATECC108A-SSHDA-T)
设计说明
Estimated: the ATECC608B-SSHDA-T draws approximately 3 mA during active ECDSA operations and less than 150 nA in deep sleep. Place a 100 nF X7R ceramic decoupling capacitor within 3 mm of the VCC pin (pin 8) and add a 1 µF bulk capacitor for noisy rails. For battery-powered applications, hold the SDA/SCL lines low during sleep to minimize wake-up glitches; the ATECC608B wakes within 1 ms after detecting I²C activity.
Route I²C SDA (pin 5) and SCL (pin 6) as short, parallel traces with a ground reference plane below. Keep trace length below 50 mm at 400 kbps and below 25 mm at 1 Mbps. Connect external pull-up resistors of 1 kΩ to 10 kΩ to VCC; choose 2.2 kΩ for 3.3V rails with multiple devices on the bus, or 4.7 kΩ for 5V rails. Place the ATECC608B away from high-frequency switching nodes (DC-DC converters, RF traces) to prevent EMI-induced crypto failures.
Do not leave the NC pins (1, 2, 3) floating on long-running production boards; tie them to GND via 100 kΩ resistors to prevent ESD-induced latch-up. Do not connect the GPIO pin (pin 7) to any signal that sources or sinks more than 5 mA. After provisioning, the ATECC608B's configuration zone is locked one-way; verify all slots and key assignments in pre-production units before locking, because once locked they cannot be modified.
Place the ATECC608B on the same PCB layer as the host MCU's I²C pins, avoiding vias on SDA/SCL. If a layer change is unavoidable, use paired ground-return vias adjacent to each signal via. Keep the exposed pad of the SOIC-8 connected to a quiet ground plane; do not run noisy signals beneath the IC. For CE/EMI compliance, consider a small ferrite bead on VCC to suppress high-frequency noise injection into the internal regulator.
合规信息
RoHS and REACH compliant per Microchip product page. Not AEC-Q100 qualified; the ATECC608B-MAHCZ-T variant is the automotive-grade counterpart. Lifecycle status 'NRND' (Not Recommended for new designs) per Microchip ATECC608B product page as of 2026-10-07.
