question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Hardware Secure Element Support? ATECC608A/B Specifically?

See original GitHub issue

Confirm by changing [ ] to [x] below:

Known Issue

  • [X ] I’m using ATS data type endpoint: the endpoint should look like <prefix>-ats.iot.<region>.amazonaws.com

Platform/OS/Hardware/Device What are you running the sdk on?

Linux, ARM64 (Pocketbeagle)

Describe the question

Is there a pattern or recommendation for using certificates stored in a hardware secure element such as the ATECC608A? AWS IoT Greengrass supports this element and is an AWS certified solution and it exposes a PCKS#11 interface and is well supported on Linux and storing private key materials on filesystems on Linux machines no matter how “secure” does not appeal or work for most applications.

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:9 (5 by maintainers)

github_iconTop GitHub Comments

3reactions
JonathanHensoncommented, Dec 8, 2020

Are you looking for something like pkcs#11 support? We have this queued in the backlog but it hasn’t made it to the top of the priorities list yet. If that’s what you’re looking for could you let us know so we can update the priority?

1reaction
JonathanHensoncommented, Dec 8, 2020

Alternatively the SDK has an api for doing this from in-memory. That doesn’t help with the most secure requirements where you can’t even load to memory, but if you can that would provide a work around for the time being.

Read more comments on GitHub >

github_iconTop Results From Across the Web

ATECC608B - Microchip Technology
Fully Customizable Secure Element. ATECC608B ... Cryptographic co-processor with secure hardware-based key storage; Protected storage for up to 16 Keys, ...
Read more >
Secure Boot with ATECC608A - YouTube
Learn how to architect a secure boot with Microchip secure element ATECC608A. It offers a strong security implementation by verifying the ...
Read more >
MicrochipTech/cryptoauthlib: Library for interacting ... - GitHub
The library is structured to support portability to: multiple hardware/microcontroller platforms; multiple environments including bare-metal, RTOS and Windows/ ...
Read more >
Overview | Adafruit ATECC608 Breakout
The ATECC608 is the latest crypto-auth chip from Microchip, and it uses I2C to send/receive commands. Once you 'lock' the chip with your...
Read more >
ATECC608B CryptoAuthentication Devices - Microchip ...
The ATECC608B devices are a secure element integrating both Elliptic Curve Diffie ... Hardware support for an asymmetric sign, verify, and key agreement:....
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found