ECDSA: FIPS186-4 Elliptic Curve Digital Signature
• NIST standard P-256 elliptic curve support

SHA-256 and HMAC hardware accelerators
• Internal Asymmetric Key Generation

Internal High-Quality NIST SP 800-90A/B/C Random Number Generator (RNG)

Joint Interpretation Laboratory (JIL) Score for Resistance to Attackers– level JIL High
• Evaluated to the standard “Jil-Application-Of-Attack-Potential-To-Smartcards-V3.1”
• Achieved through tamper-resistant countermeasures to resist environmental, non-invasive and invasive
• Active shield to protect against invasive attacks
• Internal memory encryption and scrambling
• Low and high supply voltage tampers
• Low and high temperature tampers
• FIPS 140-3 Compliance Mode Configuration Option
• Field-Programmable EEPROM
• Single ECC private key
• One device certificate and one CA signer certificate
• Single symmetric secret key
• 64-byte user memory
• 40-Year Data Retention at +55℃
• Monotonic Counter with the Maximum Count Value of 10,000
• Unique 72-bit Serial Number
• Two Interface Options Available
• 125 kbps Pulse-Width Modulated (PWM) single-wire serial interface (SWI)
• Parasitic power support for single-wire interface with External Capacitor
• 400 kHz Fast mode I2C interface

130 nA Nominal Sleep Current

Extended Industrial Temperature of -40℃ to +105℃ Ambient Operating Range
• Trust platform support with pre-configured TrustFLEX configuration
• FIPS CAVP certification : ECDSA, HMAC, SHA2-256
• FIPS ESV certification : NRBG Entropy Source, DRBG

The ECC204 TrustFLEX AUTH is a member of the CryptoAuthentication™ product family. The TrustFLEX variant come with the Microchip secure key provisioning service and allows you to purchase provisioned devices with your set of credentials from a minimum orderable quantity of 2000 units. You don't want the service, consider the standard ECC204.

The ECC204 will run and ECDSA P256 sign and an HMAC cryptographic operation on the challenges the host will send. If you are looking for a solely symmetric authentication device, the SHA104 offers a MAC operation.

The device is targeted for disposable and ecosystem control applications and is intended to be used as a companion device with Microchip or other vendors’ microcontrollers. Consider implementing an ATECC608 in your host to perform the ECDSA P256 verify function of the signature your disposable or accessory would return. You could leverage that same ATECC608 for mutual authentication to an IoT cloud platform