2.2.4 ATECC608A-TNGTLS Detailed Slot Access Policies

Detailed Slot Configurations

The following tables provide a more detailed description of the slot configuration and key configuration settings for each configured slot on the device. Relevant commands and command modes applicable to each configured slot are included.

Table 2-5. Slot 0 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
0Key:Primary Private Key
  • Contains P256 NIST ECC private key
  • The corresponding public key can always be generated
  • Random nonce is required
Slot:
  • Slot is secret
  • Can sign external messages
  • Can use with ECDH command
Valid Commands:
Table 2-6. Slot 1 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
1Key:Internal Sign Private Key
  • Contains P256 NIST ECC private key
  • The corresponding public key can always be generated
  • Random nonce is required
Slot:
  • Slot is secret
  • Can sign internal messages generated by GenDig or GenKey
  • ECDH disabled
Valid Commands:
Table 2-7. Slot and Key Configuration Slots 2-4
SlotConfiguration ValueDescription of Enabled Features
2,3 or 4Key:Secondary Private Keys 1-3
  • Contains P256 NIST ECC private key
  • The corresponding public key can always be generated
  • Random nonce is required
  • This slot can be individually locked
Slot:
  • GenKey can be used to generate a new ECC private key in this slot prior to locking
  • Slot is secret
  • Can sign external messages
  • Can use with ECDH command
Valid Commands:
Table 2-8. Slot 5 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
5Key:Clear Text Data
Slot:
  • Can not be written
  • Can be read as clear text
Valid Commands:Clear Text Read
Table 2-9. Slot 6 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
6Key:IO Protection Key
  • Can contain a SHA256 symmetric key or other data. If the IO protection key is not used, this slot can be used for other data
  • A random nonce is required when this key is used
  • This slot can be individually locked
Slot:
  • Data can be written in the Clear
  • The contents of this slot are secret and cannot be read
  • Slot cannot be used for the CheckMac Copy command
Valid Commands:
Table 2-10. Slot 8 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
8Key:General Data
  • This slot is designated for use with general data
  • Slot is lockable
Slot:
  • Clear text writes and reads are permitted to this slot
  • Slot cannot be used for the CheckMac Copy command
Valid Commands:
Table 2-11. Slot 9 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
9Key:AES Key
  • Slot can store up to four AES 128-bit symmetric keys
Slot:
  • Clear text writes are allowed to this slot
  • This slot is secret
  • Slot cannot be used for the CheckMac Copy command
Valid Commands:
Table 2-12. Slot 10 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
10Key:Device Compressed Certificate
  • Slot defined to store other data
Slot:
  • Data cannot be overwritten
  • Data can be read in the clear
Valid Commands:
Table 2-13. Slot 11 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
11Key:Signer Public Key
  • Slot is defined for ECC key
  • ECC key is a public key
Slot:
  • Data cannot be overwritten
  • Data can be read in the clear
Valid Commands:
Table 2-14. Slot 12 Configuration Information
SlotConfiguration ValueDescription of Enabled Features
12Key:Signer Compressed Certificate
  • Slot defined to store other data
Slot:
  • Data cannot be overwritten
  • Data can be read in the clear
Valid Commands: