Introduction
The ATECC608C-TFLXTLS is a pre-provisioned variant of the ATECC608C. The ATECC608C provides enhanced
security measures over that of the ATECC608A and ATECC608B. These enhancements also apply to the
ATECC608C-TFLXTLS. The TrustFLEX secure element is part of Microchip’s family of generically provisioned
security-focused devices. The device configuration was designed to make the secure element applicable to
some of the most common use cases in the IoT market, while minimizing the learning and start-up curves
associated with security devices.
The ATECC608C-TFLXTLS configuration is similar to that of the ATECC608C-TNGTLS. Some additional flexibility
and capability has been provided with respect to data loaded into certificate and key slots and the locking
options of those slots. These slot access polices will be set by the Trust Platform Design Suite tools prior to
ordering the ATECC608C-TFLXTLS devices. A Single Wire Interface (SWI) option is also available for this device.
This data sheet provides the slot and key configuration information that is unique to the ATECC608C-TFLXTLS.
This information clearly defines the access policies of each of the data zone slots. Limited command and I/O
operating information has been provided since the devices are to be used with the Trust Platform Development
Suite (TPDS) tools. An application section discussing Microchip’s hardware and software tools that can aid in
developing an application is also provided with additional links to the location of the tools.
Features
• Specified Configuration Zone with limited selectable options.
• I/O Options
– I2C Interface with One-Time Changeable I2C Address
– Single Wire Interface (SWI)
• JIL High Rating – Validated to JIL Application of Attack Potential to Smartcards and Similar Devices, Version 3.1
• Internal High-Quality NIST SP 800-90A/B/C True Random Number Generator (TRNG) NIST CMVP ESV Certified
• One Permanent Primary P-256 Elliptic Curve Cryptography (ECC secp256r1) Private Key Fixed at
Manufacturing Time
• One Internal Sign Private Key for Key Attestation
• Three Secondary P-256 ECC Private Keys that Can Be Regenerated by the User
• Signer Public Key from Signer Certificate
• Public Key Validation Support
• One Customizable Symmetric Secret Key Slot
• IO Protection Key Slot to Protect Interface Communication
• Secure Boot Enabled with Customizable Secure Boot Public Key at Time of Manufacture
• ECDH/KDF Key Slot Capable of Being Used with AES Keys and Commands
• X.509 Compressed Certificate Storage
• Customizable Certificate Storage Slots
• 1.8V to 5.5V IO Levels, 2.0V to 5.5V Supply Voltage
• Standard Industrial Temperature Range: -40℃ to +85℃
• 30 nA nominal Sleep Current
• Available in 8-Pad UDFN and 8-Pin SOIC package options at a 2k MOQ
Use Cases
• Secure IoT TLS 1.2 and 1.3 Connections including custom PKI
• Secure Boot/Secure Firmware Update
• Disposable/Accessory Authentication
• I/P and Data Protection