3.

Compatibility

3.1

Microchip ATECC508A

The ATECC608A is designed to be fully compatible with the ATECC508A devices with the limited

exception of the functions listed below. If the ATECC608A is properly configured, software written for the

ATECC508A should work with the ATECC608A without any required changes, again with the exception of

the functions listed below.

Note:  Most elements of the configuration zone in the ATECC608A are identical in both location and

value with the ATECC508A. However, the initial values that had been stored in the LastKeyUse field may

need to be changed to conform to the new definition of those bytes which can be found in this document.

That field contained the initial count for the Slot 15 limited use function which is supported in the

ATECC608A via the monotonic counters.

3.1.1

New Features in ATECC608A vs. ATECC508A

•

Secure boot function, with IO encryption and authentication

•

KDF command, supporting PRF, HKDF, AES

•

AES command, including encrypt/decrypt

•

GFM calculation function for GCM AEAD mode of AES

•

Updated NIST SP800-90 A/B/C Random Number Generator

•

Flexible SHA/HMAC command with context save/restore

•

SHA command execution time significantly reduced

•

Volatile Key Permitting to prevent device transfer

•

Transport Key Locking to protect programmed devices during delivery

•

Counter Limit Match function

•

Ephemeral key generation in SRAM, also supported with ECDH and KDF

•

Verify command output can be validated with a MAC

•

Encrypted output for ECDH

•

Added self test command, optional automatic power-on self test

•

Unaligned public key for built-in X.509 cert key validation

•

Optional power reduction at increased execution time

•

3.1.2

Features Eliminated in ATECC608A vs. ATECC508A

•

HMAC command removed, replaced via new more powerful SHA command

•

OTP consumption mode eliminated, now read only

•

Pause command eliminated along with related Selector function in UpdateExtra

•

Slot 15 special limited use eliminated, replaced with standard monotonic counter limited use

•

SHA command no longer uses TempKey during calculation, result in TempKey is unchanged

ATECC608A

Compatibility

Datasheet Summary

DS40001977A-page 14