2.2.2 Slot Configuration Terminology

The following section provides a set of terms used to discuss configuration options. The terms are arranged alphabetically.

Term
Description
AES Key
Slot can be used as a key source for AES commands. The AES key is 128 bits in width for the ATECC608A-TNGLoRaWAN.
Always Write
Slot can be written in the clear with the Write command.
Clear Read
Slot is considered public (non-secret) and its contents can be read in the clear with the Read command.
ECDH
Elliptic Curve Diffie Hellman. Private key can be used with the ECDH command.
Encrypted Write
Slot can only be written using an encrypted write based on the write key specified.
Ext Sign
Private key can be used to sign external (arbitrary) messages.
Int Sign
Private key can be used to sign internal messages generated by the GenKey or GenDig commands. Used to attest the device's internal keys and configuration.
Lockable
Slot can be locked at some point in the future. Once locked, the slot contents cannot be changed (read/use only).
No Read
Slot is considered secret and its contents cannot be read with the Read command. Private keys and symmetric secrets should always be configured as No Read.
No Write
Slot cannot be changed with the Write command.
Permanent
Private key is permanent/unchangeable. It is internally generated during factory provisioning.
Updatable
Private key can be overwritten later with a new, random, internally-generated private key. Its initial value is internally generated during factory provisioning.