最近发现了一个ATECC608A完美兼容替代加密芯片,型号为MODSEMI的MOD8ID,真正做到了P2P兼容感人的是,没有必要改变主机端的原始Cryptolib完美适配,无需更改任何代码和硬件。
ECCDSA密钥对签名、验签、SecureBOOT,TLS等接口功能都很完美,硬件防护也做得非常到位。不仅如此,也向下兼容了ATECC508系列具有国密安全等功能。
支持DFN8小封装和SOP8。
/* [0] init: I2C通信连接、测试(使用)MOD8ID通信调试,I2C请参考驱动移植ecc_i2c.c) */ status = mse_init(&cfg_mod8_i2c); if (status != MSE_SUCCESS) { printf(" mse_init() failed with ret=0xd\n", status); goto exit; } printf(" init OK.\n"); /* [1] Load configuration:加载配置并锁定配置区(只执行一次,注:锁定后无法解锁) */ status = app_load_configuration(); if (status != MSE_SUCCESS) { printf(" APP - Load configuration failed\n"); goto exit; } printf(" Load configuration OK.\n"); /* [2] Write Slot Data:生成密钥、写入密钥和应用配套数据,锁定数据区(锁定后无法解锁),前提条件:[1] */ status = app_write_key(); if (status != MSE_SUCCESS) { printf(" APP - Write key failed\n"); goto exit; } printf(" Write key OK.\n"); /* [3] Sign_Verify: 签名、验签、加解密等应用,[2] */ status = app_sign_verify(); if (status != MSE_SUCCESS) { printf(" APP - Sign_Verify failed\n"); goto exit; } printf(" Sign_Verify OK.\n"); /* [4] HMAC: [2] */ status = app_hmac(); if (status != MSE_SUCCESS) { printf(" APP - HMAC failed\n"); goto exit; } printf(" HMAC OK.\n");
- Securityco-processorwithcryptographic algorithm and key storage
-
- High-end security controller
- Protected Storage for Keys, Certificates orData
-
- Hardware Support for Asymmetric Sign,Verify,authentication,Key Agreement:
-
- Hardware cryptographic algorithm processor:SM2,ECC-P256, SHA-256, TRNG
- ECDSA: Elliptic Curve Digital Signature
- ECDH: Elliptic Curve Diffie-Hellman
- SM2: Diffie-Hellman Ephemeral (ECDHE) over the SM2 elliptic curve
-
- Hardware Support for SymmetricAlgorithms:
-
- SHA-256 & HMAC
- SM4:Block-ciphersymmetricalgorithmEncrypt/Decrypt
- AES-128/256: Encrypt/Decrypt
-
- Networking Key ManagementSupport:
-
- securitykey generation and key agreement
- Communication dataencryption with protected
- Turnkey PRF/HKDF calculation for TLS
-
- Security update and firmwareSupport:
-
- High security ECDSA firmware signaturevalidation
- Full life cyclesecure bootvalidation
- Firmware upgrade protection and data encryption protection
-
- Internal High-Quality NIST Standard Random Number Generator(RNG)
- Up to 5kB of user security storage to store extended security information
- Unique SerialNumber
- High-Endurance MonotonicCounters
- Interface Options Available400k/1 MHz Standard I2C Interface
- Fast and easy integration
- DFN8 andSOP8 Packages
关于ATECC608和MOD8ID可私信使用加密芯片进行技术和调试。