ECC204

Overview

© 2023 Microchip Technology Inc.

and its subsidiaries

Summary Data Sheet

DS40002436A-page 5

1.

Overview

1.1

Use Cases

The ECC204 is a member of the Microchip CryptoAuthentication family of high-security cryptographic devices

that combine world-class hardware-based key storage with hardware cryptographic accelerators to implement

authentication.

The ECC204 device has a command set that allows for its usage in many applications. The primary uses include the

following:

• Disposables and Accessory Authentication

Authenticates that add-on accessories are authorized for use with a given host system. Both asymmetric and

symmetric options can be implemented. Usage can be limited through the monotonic counter built into the

device.

• Ecosystem Control and Anti-Counterfeiting

Validates that a system or component is authentic and comes from the OEM shown on the nameplate

Tip: The use cases shown are examples of what can be implemented with the ECC204 but is not

exhaustive. Contact Microchip Technical Support to determine if a use case outside of these can be

implemented.

1.2

Device Features

The ECC204 includes an EEPROM array that can be used to store one private ECC P-256 key, two

encoded certificates, one symmetric secret key, miscellaneous read/write data, consumption logging and security

configurations. Write access to the various Data zone slots and configuration subzones of memory can be restricted.

The device comes in one of two possible serial interfaces. The I2C version of the device supports a standard I2C

interface at speeds of up to 400 kHz. The interface is compatible with the Standard and Fast modes I2C interface

specifications. The device also supports a Microchip proprietary PWM Single-Wire Interface (SWI), which can reduce

the number of GPIOs required on the system processor and/or reduce the number of pins on connectors. When in

SWI mode, the ECC204 can be operated in Parasitic Power mode, reducing the pin count to just two pins.

Each ECC204 unit is shipped with a unique 72-bit serial number. The ECC204 also features a wide array of defense

mechanisms specifically designed to prevent physical attacks on the device itself or logical attacks on the data

transmitted between the device and the system. Hardware restrictions on how a key is used or generated provide

further defense against certain styles of attack.

For those users interested in a higher level of security, a Compliance mode bit is available in the Configuration zone.

If the Compliance bit is set, compliance with various aspects of FIPS 140-3 is enforced by the device.

The ECC204 also has a monotonic counter that can be attached to either the ECC P-256 private key or the HMAC

key to limit the use of one of these keys. If so desired, the monotonic counter can also be used by the host system.

1.3

Cryptographic Operation

The ECC204 device implements a complete asymmetric (public/private) key cryptographic signature solution based

upon Elliptic Curve Cryptography and the ECDSA signature protocol. The device features hardware acceleration

for the NIST standard P-256 prime curve and supports high-quality private key generation and ECDSA signature

generation.

The hardware accelerator can implement asymmetric cryptographic operations faster than software running on

standard microcontrollers without the usual high risk of key exposure, which is endemic to standard microcontrollers.