ATAES132-SH-ER Atmel, ATAES132-SH-ER Datasheet - Page 41

• Manufacturer Part Number: ATAES132-SH-ER
• Description: EEPROM AES 32Kbit EE I2C
• Manufacturer: Atmel

Specifications of ATAES132-SH-ER

• Rohs: yes
• Maximum Clock Frequency: 1 MHz
• Operating Supply Voltage: 6 V
• Maximum Operating Temperature: - 40 C to + 85 C
• Mounting Style: SMD/SMT
• Package / Case: SOIC-8
• Interface Type: I2C
• Factory Pack Quantity: 2300

7.10.
Encrypt Command
The encrypt command accepts 1 to 32 bytes of plaintext, encrypts the data and generates an integrity MAC. The encrypted
data and OutMAC are returned to the system.
The encrypt command can be used to encrypt packets for decryption by the same or by another ATAES132 if the
requirements described in Section 7.8.1 are satisfied.
If the EKeyID specifies a key in the key memory: the KeyConfig[EKeyID].ExternalCrypto bit must be 1b.
If KeyConfig[EKeyID].AuthKey bit is 1b, then prior authentication is required using the KeyID stored in
KeyConfig[EKeyID].LinkPointer.
If the EKeyID specifies the VolatileKey: (See Section 4.3) The VolUsage.EncryptOK must be set to 01b, 10b, or 11b.
If the VolUsage.EncryptOK bits are set to 10b or 11b, then prior authentication is required using VolatileKey prior to execution
of the encrypt command.
A valid Nonce command is required to run the Encrypt command. If the KeyConfig[EKeyID].RandomNonce bit is set for the
encryption key, then the Nonce must be random.
Table 7-38. Input parameters
Table 7-39. Output parameters
The command and response packet is transmitted as a block beginning with the count and ending with a packet checksum.
This block format is described in Section 6.1.
Opcode
Mode
Param1
Param2
Data
Name
ReturnCode
OutMac
OutData
Name
Encrypt
Mode
EKeyID
Count
InData
16 or 32
(Bytes)
Size
16
1
Notes
Upon success, 0x00 will be returned. Any command execution or validation failure generates
a non-zero error code, per Section 6.3.
Integrity MAC for the output data
Encrypted data (ciphertext)
(Bytes)
1 – 32
Size
1
1
2
2
Notes
0x06
Bits 0 to 4: Reserved. Must be 0b.
Bit 5: If 1b, include the usage counter associated with the encryption key in
Bit 6: If 1b, include the SerialNum in the MAC
Bit 7: If 1b, include the first four bytes of the SmallZone in the MAC
Upper byte is always 0x00. Lower byte is the KeyID of the encrypt key
Upper byte is always 0x00. Lower byte is the number of bytes to be
encrypted
Input data to be encrypted (plaintext)
the MAC
Atmel ATAES132 Preliminary Datasheet
8760A−CRYPTO−5/11
41