AT88SA10HS-SH-T Atmel, AT88SA10HS-SH-T Datasheet

no-image

AT88SA10HS-SH-T

Manufacturer Part Number
AT88SA10HS-SH-T
Description
Processors - Application Specialized 58951-Eb CryptoAuth SHA-256 HST IC GRN
Manufacturer
Atmel
Datasheet

Specifications of AT88SA10HS-SH-T

Lead Free Status / RoHS Status
Supplier Unconfirmed
Features
• Secure key storage to complement Atmel AT88SA100S and Atmel AT88SA102S
• Superior SHA-256 Hash Algorithm
• Guaranteed Unique 48-bit Serial Number
• High speed single wire interface, optionally shared with client
• Supply Voltage: 2.7 – 5.25V
• 1.8V – 5.5V communications voltage
• <100nA Sleep Current
• 4KV ESD protection
• Multi-level hardware security
• Secure personalization
• Green compliant (exceeds RoHS) 3-pin SOT-23 and 8-pin TSSOP or SOIC packages
Applications
• Consumable device (battery, toner, other supplies) authentication
• Network & Computer Access control
• Authenticated communications for control networks
• Anti-clone authentication for daughter cards
• Physical access control (electronic lock & key)
1.
The Atmel
authentication devices to implement the SHA-256 hash algorithm, which is part of
the latest set of recommended algorithms by the US Government. The 256-bit key
space renders any exhaustive attacks impossible.
The Atmel AT88SA10HS host version of CryptoAuthentication chips is capable of
validating the response coming from the SHA-256 engine within an authentic
CryptoAuthentication client (SA100S or SA102S), even if that response includes
within the computation the serial number of the client. For detailed information on
the cryptographic protocols, algorithm test values and usage models refer to “Atmel
AT88SA100S” and “Atmel AT88SA102S” Datasheets, along with the application
notes dedicated to this product family.
The host CryptoAuthentication performs three separate operations (named HOST0,
HOST1 & HOST2) to implement this validation. The AT88SA10HS chip takes both
the challenge and response as inputs and returns a single Boolean indicating
whether or not the response is valid, in order to prevent the host chip from being
used to model a valid client.
The host system is responsible for generating the random challenge that is sent to
both the client and host CryptoAuthentication devices as AT88SA10HS does not
include a random number generator.
Note:
Devices
Introduction
The chip implements a failsafe internal watchdog timer that forces it into a very low
power mode after a certain time interval regardless of any current activity. System
programming must take this into consideration. Refer to Section 4.5 for more details.
®
CryptoAuthentication family of chips is the first cost-effective
Atmel
CryptoAuthentication
Host Security Chip
Atmel AT88SA10HS
8595F–SMEM–8/10

Related parts for AT88SA10HS-SH-T

AT88SA10HS-SH-T Summary of contents

Page 1

... The host CryptoAuthentication performs three separate operations (named HOST0, HOST1 & HOST2) to implement this validation. The AT88SA10HS chip takes both the challenge and response as inputs and returns a single Boolean indicating whether or not the response is valid, in order to prevent the host chip from being used to model a valid client ...

Page 2

... Fuse Map AT88SA10HS incorporates 128 one-time fuses within the chip. Once burned, there is no way to reset the value of a fuse. All fuses, with the exception of the Fuse MfrID and Fuse SN bits initialized by Atmel, have a value of one when shipped from the Atmel factory and transition to zero when they are burned. These fuses are burned at system personalization and cannot be changed after that time ...

Page 3

... Key Values The values stored in the Atmel AT88SA10HS internal key array are hardwired into the masking layers of the chip during wafer manufacture. All chips have the same keys stored internally, though the value of a particular key cannot be determined externally from the chip. For this reason, customers should ensure they program a unique (and secret) number into the 64-secret fuses and they should store the Atmel provided key values securely ...

Page 4

... These include an active shield over the entire surface of the part, internal memory encryption, internal clock generation, glitch protection, voltage tamper detection and other physical design features. Pre-programmed keys stored on AT88SA10HS are encrypted in such a way as to make retrieval of their values via outside analysis very difficult. ...

Page 5

... LOGIC Ø LOGIC 1 NOISE SUPPRESION 3. Absolute Maximum Ratings* Operating Temperature .................. −40°C to +85°C Storage Temperature .................. −65° 150°C Voltage on Any Pin with Respect to Ground ............... − 0 8595F–SMEM–8/10 Atmel AT88SA10HS Host Authentication Chip data comm t t WLO WHI START ZHI ...

Page 6

... TIMEOUT AT88SA10HS will enter sleep mode and the Wake token must be resent µs µs Atmel AT88SA10HS will initiate the first low going transition after this time interval following the end of the Transmit flag After Atmel AT88SA10HS transmits the last bit of a block, system must wait this interval ...

Page 7

... Input High Voltage @ V = 5.25V cc Input High Voltage @ V = 2.7V cc Input Low Voltage when Active Input High Voltage when Active Output Low voltage Maximum Input Voltage ESD 8595F–SMEM–8/10 Atmel AT88SA10HS Host Authentication Chip Symbol Min Typ Max - 2.7 5. 3.0 5.25 V BURN ...

Page 8

... All other values are reserved and will be ignored. Note: The values of flag for the Atmel AT88SA10HS host are different from that of the two clients, the Atmel AT88SA100S and Atmel AT88SA102S. In this manner, both Atmel AT88SA102S (or Atmel AT88SA100S) and Atmel AT88SA10HS can share the same communications pin on the system controller. While the AT88SA10HS will wake up when communications are sent to the client, it will ignore all such transactions ...

Page 9

... Sleep Flag The sleep flag is used to transition the AT88SA10HS to the low power state, which causes a complete reset of the AT88SA10HS’s internal command engine and input/output buffer. It can be sent to the AT88SA10HS at any time when the AT88SA10HS will accept a flag. ...

Page 10

... AT88SA10HS to sleep. 4.4.1. IO Timeout After a leading transition for any data token has been received, AT88SA10HS will expect the remaining bits of the token to be properly received by the chip within the t transmission of an illegal token (a low pulse exceeding t t interval ...

Page 11

... The Atmel AT88SA10HS went into the sleep mode for some reason while the system was transmitting data. In this case, the Atmel AT88SA10HS will interpret the next data bit as a Wake token, but ignore some of the subsequently transmitted bits during its wake-up delay. If any bytes are transmitted after the wake-up delay, they may be interpreted as a legal flag, though the following bytes would not be interpreted as a legal command due to an incorrect count or the lack of a correct CRC ...

Page 12

... Concatenates the key stored in AT88SA10HS with an input 256-bit challenge and generates the digest of this message. The result is left in internal memory and cannot be read. In general, the challenge should be a random number generated by the host system, which will be sent to both the host (AT88SA10HS) and client (Atmel AT88SA100S or Atmel AT88SA102S). ...

Page 13

... Zero Data OtherInfo Table 5-4. Output Parameters Name Size Notes Success 1 Upon successful completion of HOST1, a value of 0 will be returned by Atmel AT88SA10HS 8595F–SMEM–8/10 Atmel AT88SA10HS Host Authentication Chip Size Notes 1 0x40 1 Controls composition of message, see below for details 2 Must be 0x00 00 ...

Page 14

... HOST1 has not been previously successfully run within this Wake cycle. If the two digests do not match, the AT88SA10HS provides no information as to the source of the mismatch, which must be deduced from the inputs to the three HOSTX commands match failure, the entire set of HOST0, HOST1 & ...

Page 15

... Notes Success 1 If the input ClientResponse matches the internally generated response, a value of zero will be returned by Atmel AT88SA10HS after a T 0x0F will be returned after a T 5.4. Read Reads 4-bytes from Fuse or ROM; returns an error if an attempt is made to read any fuses or ROM locations which are illegal ...

Page 16

... See Section 1.2 for more details To facilitate secure personalization of the AT88SA10HS, this map may be encrypted before being sent to the chip. If this mode is desired, then the Decrypt parameter should be set to one in the input parameter list. The decryption (transport) key is computed by the GenPersonalizationKey command, which must have been run immediately prior to the execution of BurnSecure ...

Page 17

... Which fuses to burn, may be encrypted During execution of this command the chip will ignore all PAUSE. Size Notes 1 0x00 1 Must be 0x00 2 Must be 0x00 the Atmel AT88SA10HS will return a value of zero in response to a PAUSE when the fuse element is actually being burned. The > 4.5V, must be 0x80 00 otherwise ...

Page 18

... V 8 Power supply, 2.7 – 5.25V. This pin should be bypassed with a high quality 0.1µF capacitor close this pin with a short trace to V Atmel AT88SA10HS Host Authentication Chip 18 for proper communications. When the chip is not in use this Refer to Applications Notes on Atmel’ ...

Page 19

... These dimensions apply to the flat section of the lead between 0.08 mm and 0.15mm from the lead tip. This drawing is for general information only. Refer to JEDEC Drawing TO-236, Variation AB for additional information. Package Drawing Contact: packagedrawings@atmel.com R 8595F–SMEM–8/10 Atmel AT88SA10HS Host Authentication Chip 3 GND E SDA ...

Page 20

... Dimension b does not include Dambar protrusion. Allowable Dambar protrusion shall be 0.08 mm total in excess of the b dimension at maximum material condition. Dambar cannot be located on the lower radius of the foot. Minimum space between protrusion and adjacent lead is 0.07 mm. 5. Dimension D and determined at Datum Plane H. Package Drawing Contact: packagedrawings@atmel.com Atmel AT88SA10HS Host Authentication Chip ...

Page 21

... D Side View Note: These drawings are for general information only. Refer to JEDEC Drawing MS-012, Variation AA for proper dimensions, tolerances, datums, etc. 1150 E. Cheyenne Mtn. Blvd. Colorado Springs, CO 80906 8595F–SMEM–8/10 Atmel AT88SA10HS Host Authentication Chip TITLE 8S1, 8-lead (0.150" Wide Body), Plastic Gull Wing ...

Page 22

... Ordering Codes Ordering Code AT88SA10HS-TSU-T AT88SA10HS-TH-T AT88SA10HS-SH-T 9. Revision History Doc. Rev. Date 8595F 08/2010 8595E 06/2010 8595D 05/2010 8595C 04/2010 8595B 02/2010 8595A 04/2009 Atmel AT88SA10HS Host Authentication Chip 22 Package Type Voltage Range SOT, Tape & Reel 2.7V–5.25V TSSOP, Tape & Reel 2.7V– ...

Page 23

... Disclaimer: The information in this document is provided in connection with Atmel products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Atmel products. EXCEPT AS SET FORTH IN ATMEL’S TERMS AND CONDITIONS OF SALE LOCATED ON ATMEL’S WEB SITE, ATMEL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT ...

Related keywords