Atmel unveils Cryptoauthentication host-side IC

Atmel Corporation has introduced a 'plug-and-play' Cryptoauthentication host-side IC.

The AT88SA10HS allows designers to implement authentication-ready embedded systems without any knowledge of security protocols or algorithms and without writing any special cryptographic software.

When used with Atmel's AT88SA family of Cryptoauthentication ICs and a system microprocessor such as Atmel's AVR or ARM, the AT88SA10HS provides a complete, virtually uncrackable authentication system for electronic end-product consumables, including ink cartridges, battery packs, blood bags and breathing tubes.

They can also be used to protect end products from bogus firmware updates and to validate software or media modules.

The AT88SA10HS host device offloads key storage and the execution of authentication algorithms from the system MCU, making it suitable for use in applications with limited microprocessor and/or memory resources or when reduced system cost and/or complexity is desired.

Until now, the host side of the authentication process has been implemented in a code executed by the system microcontroller.

This code could be vulnerable to modification or copying when stored in an external unprotected Flash memory device.

Atmel's Cryptoauthentication host IC includes secret key storage in a special-purpose highly secure hardware device.

The AT88SA10HS device is a single-chip authentication host with a 48-bit guaranteed unique serial number, an SHA-256 engine and a 256-bit host key that is inaccessible and unreadable.

It executes all host-side operations, including challenge/response (authentication) validation and firmware integrity verification.

Atmel's AT88SA1xxS devices are secure-authentication ICs with an embedded SHA-256 engine and 256-bit cryptographic key.

The 256-bit length of the Cryptoauthentication key includes numerous possible combinations, making it impossible to crack, according to the company.

The AT88SA10HS includes 63 one-time, user-programmable fuses that are used to store a secret personalisation value and 23 fuses that can be used for status or model number information.

Once burned, there is no way to reset the value of a fuse.

Additional non-burnable fuses contain the manufacturing ID and a guaranteed unique 48-bit serial number, initialised by Atmel.

Back to top