Hardware Secure Element Support? ATECC608A/B Specifically?
See original GitHub issueConfirm by changing [ ] to [x] below:
- [X ] I’ve searched for previous similar issues and didn’t find any solution
Known Issue
- [X ] I’m using ATS data type endpoint: the endpoint should look like
<prefix>-ats.iot.<region>.amazonaws.com
Platform/OS/Hardware/Device What are you running the sdk on?
Linux, ARM64 (Pocketbeagle)
Describe the question
Is there a pattern or recommendation for using certificates stored in a hardware secure element such as the ATECC608A? AWS IoT Greengrass supports this element and is an AWS certified solution and it exposes a PCKS#11 interface and is well supported on Linux and storing private key materials on filesystems on Linux machines no matter how “secure” does not appeal or work for most applications.
Issue Analytics
- State:
- Created 3 years ago
- Comments:9 (5 by maintainers)
Top Results From Across the Web
ATECC608B - Microchip Technology
Fully Customizable Secure Element. ATECC608B ... Cryptographic co-processor with secure hardware-based key storage; Protected storage for up to 16 Keys, ...
Read more >Secure Boot with ATECC608A - YouTube
Learn how to architect a secure boot with Microchip secure element ATECC608A. It offers a strong security implementation by verifying the ...
Read more >MicrochipTech/cryptoauthlib: Library for interacting ... - GitHub
The library is structured to support portability to: multiple hardware/microcontroller platforms; multiple environments including bare-metal, RTOS and Windows/ ...
Read more >Overview | Adafruit ATECC608 Breakout
The ATECC608 is the latest crypto-auth chip from Microchip, and it uses I2C to send/receive commands. Once you 'lock' the chip with your...
Read more >ATECC608B CryptoAuthentication Devices - Microchip ...
The ATECC608B devices are a secure element integrating both Elliptic Curve Diffie ... Hardware support for an asymmetric sign, verify, and key agreement:....
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found

Are you looking for something like pkcs#11 support? We have this queued in the backlog but it hasn’t made it to the top of the priorities list yet. If that’s what you’re looking for could you let us know so we can update the priority?
Alternatively the SDK has an api for doing this from in-memory. That doesn’t help with the most secure requirements where you can’t even load to memory, but if you can that would provide a work around for the time being.