2.2.4 ATECC608A-TNGTLS Detailed Slot Access Policies

Detailed Slot Configurations

The following tables provide a more detailed description of the slot configuration and key configuration settings for each configured slot on the device. Relevant commands and command modes applicable to each configured slot are included.

Table 2-5. Slot 0 Configuration Information
Slot	Configuration Value		Description of Enabled Features
0	Key:		Primary Private Key Contains P256 NIST ECC private key The corresponding public key can always be generated Random nonce is required
	Slot:		Slot is secret Can sign external messages Can use with `ECDH` command
	Valid Commands:		GenKey - Public Key Generation Sign - External Messages ECDH - Create a Shared Secret

Table 2-6. Slot 1 Configuration Information
Slot	Configuration Value		Description of Enabled Features
1	Key:		Internal Sign Private Key Contains P256 NIST ECC private key The corresponding public key can always be generated Random nonce is required
	Slot:		Slot is secret Can sign internal messages generated by GenDig or GenKey ECDH disabled
	Valid Commands:		GenKey - Public Key Generation Sign - Internal Messages generated by GenDig or GenKey

Table 2-7. Slot and Key Configuration Slots 2-4
Slot	Configuration Value		Description of Enabled Features
2,3 or 4	Key:		Secondary Private Keys 1-3 Contains P256 NIST ECC private key The corresponding public key can always be generated Random nonce is required This slot can be individually locked
	Slot:		GenKey can be used to generate a new ECC private key in this slot prior to locking Slot is secret Can sign external messages Can use with `ECDH` command
	Valid Commands:		GenKey - Private Key Regeneration GenKey - Public Key Generation Sign - External Messages ECDH - Create a Shared Secret Lock - SlotLock Mode

Table 2-8. Slot 5 Configuration Information
Slot	Configuration Value		Description of Enabled Features
5	Key:		Clear Text Data
	Slot:		Can not be written Can be read as clear text
	Valid Commands:		Clear Text `Read`

Table 2-9. Slot 6 Configuration Information
Slot	Configuration Value		Description of Enabled Features
6	Key:		IO Protection Key Can contain a SHA256 symmetric key or other data. If the IO protection key is not used, this slot can be used for other data A random nonce is required when this key is used This slot can be individually locked
	Slot:		Data can be written in the Clear The contents of this slot are secret and cannot be read Slot cannot be used for the `CheckMac Copy` command
	Valid Commands:		Clear Text Write to slot 6 `MAC` Command Lock - SlotLock mode

Table 2-10. Slot 8 Configuration Information
Slot	Configuration Value		Description of Enabled Features
8	Key:		General Data This slot is designated for use with general data Slot is lockable
	Slot:		Clear text writes and reads are permitted to this slot Slot cannot be used for the `CheckMac Copy` command
	Valid Commands:		Write - Clear Text Read - Clear Text GenDig - Data Source `MAC` Command Lock - SlotLock mode

Table 2-11. Slot 9 Configuration Information
Slot	Configuration Value		Description of Enabled Features
9	Key:		AES Key Slot can store up to four AES 128-bit symmetric keys
	Slot:		Clear text writes are allowed to this slot This slot is secret Slot cannot be used for the `CheckMac Copy` command
	Valid Commands:		Write - Clear Text AES - Encrypt / Decrypt (Source Keys) `MAC` Command

Table 2-12. Slot 10 Configuration Information
Slot	Configuration Value		Description of Enabled Features
10	Key:		Device Compressed Certificate Slot defined to store other data
	Slot:		Data cannot be overwritten Data can be read in the clear
	Valid Commands:		Read - Clear Text GenDig - Data Source `MAC` Command

Table 2-13. Slot 11 Configuration Information
Slot	Configuration Value		Description of Enabled Features
11	Key:		Signer Public Key Slot is defined for ECC key ECC key is a public key
	Slot:		Data cannot be overwritten Data can be read in the clear
	Valid Commands:		Read - Clear Text GenDig - Data Source `Verify` Command `MAC` Command GenKey - Public Digest Mode

Table 2-14. Slot 12 Configuration Information
Slot	Configuration Value		Description of Enabled Features
12	Key:		Signer Compressed Certificate Slot defined to store other data
	Slot:		Data cannot be overwritten Data can be read in the clear
	Valid Commands:		Read - Clear Text GenDig - Data Source `MAC` Command

The online versions of the documents are provided as a courtesy. Verify all content and data in the device’s PDF documentation found on the device product page.