ECC204

Security Information

© 2023 Microchip Technology Inc.

and its subsidiaries

Summary Data Sheet

DS40002436A-page 7

2.

Security Information

2.1

Cryptographic Standards

ECC204 follows various industry standards for the computation of cryptographic results. These reference documents

are described in the following sections. See the Microchip website for further documentation on NIST CAVP

certification of these cryptographic functions.

2.1.1

SHA-256

The ECC204 computes the SHA-256 digest based on the algorithm documented here:

http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf

2.1.2

HMAC/SHA-256

ECC204 can compute an HMAC digest based upon SHA-256 using a key stored in the EEPROM as documented

below:

http://csrc.nist.gov/publications/fips/fips198-1/FIPS-198-1_final.pdf

2.1.3

Elliptic Curve Digital Signature Algorithm (ECDSA)

ECC204 computes the Elliptic Curve signatures according to the algorithm documented in:

• ANSI X9.62-2005 www.ansi.org/

• FIPS 186-5 specification nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf

2.2

Security Features

2.2.1

Physical Security

The ECC204 incorporates a number of physical security features designed to protect the EEPROM contents from

unauthorized exposure.

2.2.2

Random Number Generator (RNG)

The ECC204 device includes a high-quality cryptographic RNG implemented according to the NIST standards

SP800-90A/B/C.

2.2.3

Compliance Mode

For enhanced security, a Compliance mode is included in the ECC204 device. This mode is enabled through use

of a configuration bit. If the Compliance bit is set, compliance with various aspects of FIPS140-3 is enforced by the

device.