2.2.3 RNG Certifications

The ATECC608C True Random Number Generator (TRNG) was developed in accordance with the NIST SP800-90A/B/C specifications. The DRBG and NRBG elements of the design were evaluated using a NIST certified laboratory to the procedures they have specified.

• DRBG Certification: The Deterministic Random Bit Generator (DRBG) was evaluated as part of the ATECC608C CAVP certification activity resulting in certificate number A4280. NIST validated and attests that the DRBG, implemented as a Counter DRBG algorithm, complies with the SP800-90A specification.
• NRBG Certification:The ATECC608C NRBG Entropy Source module was certified through the NIST Cryptographic Module Validation (CMVP) Entropy Source Validation (ESV) program working in conjunction with a NIST certified laboratory. Microchip Technology was issued Entropy Certificate #E46 by NIST. NIST validated and attests that the "ECC608 NRBG Entropy Source" module complies to the SP800-90B standard with a ring oscillator-based architecture for a physical non-deterministic random bit generator module that can be reused in product revisions of the ATECC608. This attestation is being extended to the ATECC608C revision of the product. The E46 certificate will be updated on the NIST validation site when the NIST extension review is complete.