features ? companion chip to cryptorf ? and cryptomemory ? ? securely implements host algorithms ? securely stores host secrets ? verifies host firmware digests cryptocompanion ? chip for cryptomemory and cryptorf at88sc018 summary 5277cs?cryptocompanion?2/09 ? high security features in hardware ? cryptomemory and cryptorf f2 algorithm ? sha-1 standard cryptographic algorithm ? 64-bit mutual authentication protocol (under license of elva) ? permanently coded serial numbers ? high quality random number generator (rng) ? metal shield over memory ? data scrambling in nonvolatile memory ? delay penalties to prevent systematic attacks ? reset locking to preven t illegal power cycling ? voltage and frequency monitors ? host-side crypto functions ? authentication challenge generation ? device challenge response ? message authentication codes (mac) generation ? data encryption and decryption ? secure authentication key management ? secure storage and key management ? up to 16 sets of 64-bits diversified host keys ? eight sets of two 24-bit passwords ? secure and custom personalization ? up to 232-byte read/write configurable user data area ? nonvolatile up counters ? four sets unidirectional counters ? 64 million maximum counts per counter ? application features ? low voltage supply: 2.7v ? 3.6v ? 2-wire serial interface (twi, 5v compatible) ? standard 8-lead soic plastic package, green compliant (exceeds rohs) ? high reliability ? endurance : 100,000 cycles ? data retention : 10 years ? esd protection : 3,000 v min. hbm
2 cryptocompanion ? chip 5277cs?cryptocompanion?2/09 1. product overview the cryptocompanion? chip is designed as the mate to atmel?s cryptorf and cryptomemory chips, collectively referred to in the remainder of this document as crf. cryptocompanion makes extensive use of t he sha-1 hash algorithm as specified in http://www.itl.nist.gov/fipspubs/fip180-1.htm and elsewhere. in this document, t he nomenclature sha-1(a, b, c) means to concatenate a, b & c in that order and then pad them to a block si ze of 64 bytes before computing the digest. cryptocompanion generates sha-1 digests of single round datasets at a time. 1.1. general operation the crf chip contains secrets that must be known or derived by a host system in order to establish a trusted link between the two and permit communications to happen. cryptocompanion stores these secrets in an obscured way in nonvolatile memory and contains all the circuitry nec essary to perform the au thentication, password and encryption/decryption functions specifi ed in the crf datasheet. in this manner , the secrets do not ever need to be revealed. the general cryptographic strategy is as follows: ? each crf chip has a serial or identification number (id) and authentication secret g i stored in eeprom. id is freely readable while g i can never be read and is unique for all tags. ? cryptocompanion contains an eeprom t hat holds a set of common secrets (f n ). cryptocompanion combines f n with id and k id to compute a value of g that is expected to match that in the crf chip. specifically, g = sha-1(f n , id, k id ) ? g is further diversified by the inclusion of a number (k id ) generated by the host system in a manner of its choosing. typically, it will be the result of a cryptographic operation on the crf id value calculat ed using other data, secrets and/or algorithms external to cryptocompanion. this permits scenarios that offer varying degrees of additional security. ? cryptocompanion includes a general purpose cryptogra phic quality random number generator which is used to seed a mutual authentication process between cryptocompanion and crf. if the crf confirms the cryptocompanion challenge, and the cryptocompanion confirms the crf respons e, then the host system proceeds with crf operations. in this way the host syst em may use the crf without knowing the crf's secrets directly. 1.2. cryptocompanion benefits the following is a partial list of the benefits of using this chip versus storing the algorithms and secrets in standard flash system memory. ? keep confidential those core secr ets that are used to authenticate with and communicate to/from crf. (store them in eeprom, use them on-chip) ? flexible system implementation ? multiple secrets and policies for different crf locations within the system. multiple manufacturer setup options. ? hardware encryption engines, avoids algorithm disclos ure from reverse-compilation of system operating code. ? full hardware security implementation makes it harder for an attacker (even with lab equipment) to get secrets stored on cryptocompanion. ? global secrets are protected using strong security, standard algorithm (sha-1). ? robust random number generation avoids accidental replay for all cryptographic operations using the system, not just with respect to crf. ? secure eeprom storage for configuration information, etc. may permit reduction in the total bom for the system. ? easy to use ? little programming required; no knowledge of security algorithms or protocols, fast time to market.
cryptocompanion ? chip 3 5277cs?cryptocompanion?2/09 1.3. package, pin definition & io 1.3.1. pin definition 1.3.1.1. v cc , gnd power supply is 2.7 ? 3.6v. supply current less than 5 ma. cryptocompanion will be available to accept commands 60 ms after the later of v cc rising above 2.7v or reset being driven high if cryptocompanion is in a security delay then this interval is significantly longer. during power up, v cc must exhibit a monotonic ramp at a minimum rate of 50 mv/ms until v cc has crossed the 2.7v level. during power down, v cc must exhibit a monotonic ramp at a mini mum rate of 50 mv/ms once it has dropped below the 2.5v boundary. cryptocompanion does not support hot swapping or hot plugging. v cc must be bypassed with high quality surface mount capac itors that are properly lo cated on the board. atmel recommends two capacitors connected in parallel having a value of 1 f and 0.01 f. the capacitors should be manufactured using x5r or x7r dielectric material. these capacitors should be connected to cryptocompanion using a total of no more than 1cm pc board traces. atmel reco mmends the use of a ground plane and a trace length of less than 0.5cm between the capacitors and the v cc pin. failure to follow these recommendations may result in improper operation. 1.3.1.2. sda two wire interface data pin, 5 v com patible. minimum data setup time = 0.1 s, and minimum data hold time = 0 s min. the system board must include an external pull-up resistor. 1.3.1.3. scl two wire interface clock pin, 5 v compatible. maximum scl rate is 400khz, minimum t low = 1.2 s, minimum t high = 0.6 s. the system board must include an external pull-up resistor. 1.3.1.4. reset (rst) this active low input will reset all states within cryptocompanion. honored regardless of the state of powerdown. 1.3.1.5. powerdown (pdn) when held low, the part operates normally. when held high the part will go to sleep and ignore all transitions on sda and scl, power consumption will drop to less than 10 a. there is a 50 ms delay between this pin falling and the first transition on sda or scl that will be accepted by the chip.
4 cryptocompanion ? chip 5277cs?cryptocompanion?2/09 1.3.2. package cryptocompanion is packaged in an 8 lead soic package with the following pin definition: table 1. 8 lead soic package pin definition pin number pin name 1 v cc 5 gnd 7 sda 8 scl 4 rst 3 pdn 2,6 nc pins 2 & 6 are not internally connected and shou ld be connected to ground on the pc board. 1.3.3. connection diagram figure 1. connection diagram 2.7v - 5.5v 2.7v - 3.6v sda scl microprocessor cryptocompanion 1.3.4. environmental cryptocompanion is guaranteed to operate over the industrial te mperature range of -40 to 85 c. esd is rated at 3kv, human body model. 1.3.5. twi input/output operation cryptocompanion communicates to the system using a two wire interface (twi), which is similar to smbus. the chip operates as a slave and does not support clock stretching. this two wire protocol is identical to that supported by the atmel at24c16b serial eeprom chips. please see that dat asheet on the atmel web site for detailed timing and protocol information.
cryptocompanion ? chip 5 5277cs?cryptocompanion?2/09 the system processor is expected to properly format comm ands for cryptocompanion (which may include information from the crf chip), and then process the outputs of cryptocompanion (which may include sending some of the outputs to the crf chip). cryptocompanion cannot directly communicate with crf chips. both crf and cryptocompanion are slave devices. the bus master may use one or two busses to communicate with them. separate twi addr esses must be used if both chips are on the same bus. 2. ac & dc characteristics (preliminary) table 2. dc characteristics (1) applicable over recommended operating range from v cc = +2.7 to 3.6 v, t ac = -40 o c to 85 o c (unless otherwise noted) symbol parameter test condition min typ max units v cc supply voltage 2.7 3.6 v i cc supply current 400khz 5 ma i sb standby current v in = v cc or gnd 10 a v il sda input low voltage 0 v cc x 0.2 v v il clk input low voltage 0 v cc x 0.2 v v il rst input low voltage 0 v cc x 0.2 v v il pdn input low voltage 0 v cc x 0.2 v v ih sda input high voltage v cc x 0.7 5.5 v v ih scl input high voltage v cc x 0.7 5.5 v v ih rst input high voltage v cc x 0.7 5.5 v v ih pdn input high voltage v cc x 0.7 5.5 v i il sda input low current 0 < v il < v cc x 0.15 15 a i il scl input low current 0 < v il < v cc x 0.15 15 a i il rst input low current 0 < v il < v cc x 0.15 15 a i il pdn input low current 0 < v il < v cc x 0.15 15 a i ih sda input high current v cc x 0.7 < v ih < v cc 20 a i ih scl input high current v cc x 0.7 < v ih < v cc 20 a i ih rst input high current v cc x 0.7 < v ih < v cc 20 a i ih pdn input high current v cc x 0.7 < v ih < v cc 20 a v ol sda output low voltage i ol = 1ma 0 v cc x 0.15 v note: 1. typical values at 25 c. maximum values are c haracterized values and not test limits in production.
6 cryptocompanion ? chip 5277cs?cryptocompanion?2/09 table 3. ac characteristics (1) applicable over recommended operating range from v cc = +2.7 to 3.6 v, t ac = -40 o c to 85 o c, cl = 30pf (unless otherwise noted) symbol parameter min max units f clk clock frequency 0 400 khz clock duty cycle (2) 40 60 % t r rise time - sda, rst, pdn (2) 300 ns t f fall time - sda, rst, pdn (2) 300 ns t r rise time - scl (2) 300 ns t f fall time - scl (2) 300 ns t aa clock low to data out valid 900 ns t hd.sta start hold time 600 ns t su.sta start set-up time 600 ns t hd.dat data in hold time 100 ns t su.dat data in set-up time 100 ns t su.sto stop set-up time 600 ns t dh data out hold time 50 900 ns note: 1. typical values at 25 c. maximum values are c haracterized values and not test limits in production. 2. this parameter is not tested. values are based on characterization and/or simulation data. figure 2. scl: serial clock, sda: serial data i/o?
cryptocompanion ? chip 7 5277cs?cryptocompanion?2/09 3. ordering codes table 4. ordering codes ordering code package voltage range memory locking (see full specification: sections 1.5.1 for lock definitions) temperature range atd88sc018-su-cm 8s1 2.7v ? 3.6v 00 (unlocked) green compliant (exceeds rohs), industrial (-40 0 c ? 85 0 c), bulk atd88sc018-su-cm-t 8s1 2.7v ? 3.6v 00 (unlocked) green compliant (exceeds rohs), industrial (-40 0 c ? 85 0 c), tape and reel ATD88SC018-SU-CN 8s1 2.7v ? 3. 6v 10 (unlocked/confidential) green compliant (exceeds rohs), industrial (-40 0 c ? 85 0 c), bulk ATD88SC018-SU-CN-t 8s1 2.7v ? 3. 6v 10 (unlocked/confidential) green compliant (exceeds rohs), industrial (-40 0 c ? 85 0 c), tape and reel table 5. package type package type description 8s1 8-lead, 0.150? wide, plastic gull wing small outline package (jedec soic)
8 cryptocompanion ? chip 5277cs?cryptocompanion?2/09 4. package drawing figure 3. 8s1 ? soic
cryptocompanion ? chip 9 5277cs?cryptocompanion?2/09 5. revision history doc. rev. date comments 5277cs 02/2009 document updated. 5277bs 12/2008 document updated.
5277cs?cryptocompanion?02/09 headquarters international atmel corporation 2325 orchard parkway san jose, ca 95131 usa tel: 1(408) 441-0311 fax: 1(408) 487-2600 atmel asia room 1219 chinachem golden plaza 77 mody road tsimshatsui east kowloon hong kong tel: (852) 2721-9778 fax: (852) 2722-1369 atmel europe le krebs 8, rue jean-pierre timbaud bp 309 78054 saint-quentin-en- yvelines cedex france tel: (33) 1-30-60-70-00 fax: (33) 1-30-60-71-11 atmel japan 9f, tonetsu shinkawa bldg. 1-24-8 shinkawa chuo-ku, tokyo 104-0033 japan tel: (81) 3-3523-3551 fax: (81) 3-3523-7581 product contact web site www.atmel.com technical support cryptomemory@atmel.com cryptorf@atmel.com sales contact www.atmel.com/contacts literature requests www.atmel.com/literature disclaimer: the information in this document is provided in connection with atmel products. no lice nse, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with t he sale of atmel products. except as set forth in atmel?s terms and conditions of sale located on atmel?s web site, atmel assumes no liability whatsoever and disclaims any express, implied or statutory warranty relating to its products including, but not limited to, the implied warranty of merchantability, fitness for a particular purpose, or non-infringe ment. in no event shall atmel be liable for any direct, indirect, consequential, punitive, special or inciden-tal damages (including, without limitation, damages for loss of profits, business interruption, or loss of information) arising out of the use or inability to use this document, even if atmel has been advised of the possibility of such damages. atmel makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and pr oduct descriptions at any time without notice. atmel does not ma ke any commitment to update the information contained herein. unless specifically provided ot herwise, atmel products are not su itable for, and shall not be use d in, automotive applications. atmel?s products are not intended, authorized, or warranted for use as components in applications intended to support or sustain life. ? 2009 atmel corporation. all rights reserv ed. atmel?, atmel logo and combinations thereof, cryptomemory?, cryptorf?, and other s are registered trademarks, cryptocompanion?, and others are trademarks of atmel corporation or its subsidiaries. other term s and product names may be trad emarks of others.
|
