Introduction

The ATECC608C-TFLXTLS is a pre-provisioned variant of the ATECC608C. The ATECC608C provides enhanced

security measures over that of the ATECC608A and ATECC608B. These enhancements also apply to the

ATECC608C-TFLXTLS. The TrustFLEX secure element is part of Microchip’s family of generically provisioned

security-focused devices. The device configuration was designed to make the secure element applicable to

some of the most common use cases in the IoT market, while minimizing the learning and start-up curves

associated with security devices.

The ATECC608C-TFLXTLS configuration is similar to that of the ATECC608C-TNGTLS. Some additional flexibility

and capability has been provided with respect to data loaded into certificate and key slots and the locking

options of those slots. These slot access polices will be set by the Trust Platform Design Suite tools prior to

ordering the ATECC608C-TFLXTLS devices. A Single Wire Interface (SWI) option is also available for this device.

This data sheet provides the slot and key configuration information that is unique to the ATECC608C-TFLXTLS.

This information clearly defines the access policies of each of the data zone slots. Limited command and I/O

operating information has been provided since the devices are to be used with the Trust Platform Development

Suite (TPDS) tools. An application section discussing Microchip’s hardware and software tools that can aid in

developing an application is also provided with additional links to the location of the tools.

Features

• Specified Configuration Zone with limited selectable options.

• I/O Options

– I2C Interface with One-Time Changeable I2C Address

– Single Wire Interface (SWI)

• JIL High Rating – Validated to JIL Application of Attack Potential to Smartcards and Similar Devices, Version 3.1

• Internal High-Quality NIST SP 800-90A/B/C True Random Number Generator (TRNG) NIST CMVP ESV Certified

• One Permanent Primary P-256 Elliptic Curve Cryptography (ECC secp256r1) Private Key Fixed at

Manufacturing Time

• One Internal Sign Private Key for Key Attestation

• Three Secondary P-256 ECC Private Keys that Can Be Regenerated by the User

• Signer Public Key from Signer Certificate

• Public Key Validation Support

• One Customizable Symmetric Secret Key Slot

• IO Protection Key Slot to Protect Interface Communication

• Secure Boot Enabled with Customizable Secure Boot Public Key at Time of Manufacture

• ECDH/KDF Key Slot Capable of Being Used with AES Keys and Commands

• X.509 Compressed Certificate Storage

• Customizable Certificate Storage Slots

• 1.8V to 5.5V IO Levels, 2.0V to 5.5V Supply Voltage

• Standard Industrial Temperature Range: -40℃ to +85℃

• 30 nA nominal Sleep Current

• Available in 8-Pad UDFN and 8-Pin SOIC package options at a 2k MOQ

Use Cases

• Secure IoT TLS 1.2 and 1.3 Connections including custom PKI

• Secure Boot/Secure Firmware Update

• Disposable/Accessory Authentication

• I/P and Data Protection