ATMEL加密芯片ATSHA204課件

AtmelCryptoAthenticationTM

ATSHA204ATMEL代理商深圳，提供各方面的技術(shù)支持.QQ：1085487223郵箱：V1.0什么是加密芯片它本身具有十分安全的保密性，內(nèi)部可以存儲(chǔ)秘密數(shù)據(jù)，內(nèi)置加密算法，通過安全的認(rèn)證協(xié)議進(jìn)行認(rèn)證過程。認(rèn)證協(xié)議的作用 認(rèn)證雙方在不直接出示密鑰的情況下，能夠證明自己知道密鑰。散列函數(shù)HashAlan和Bell都是密碼學(xué)教授,有一天，他們共同解決一個(gè)數(shù)學(xué)難題。在辦公室里他們都沒有想出來，卻恰好在家里同時(shí)想出了答案。AlanBell你算出來是多少？不，你先說。我怎么又知道呢你算過呢？你先說。如果我說了，我怎么知道是你算出來的。散列函數(shù)Hash我運(yùn)算過后是86206恩，我已經(jīng)知道你是知道的。你不必說出答案了。把函數(shù)結(jié)果告訴我吧。散列函數(shù)HashSHA家族的五個(gè)算法，分別是SHA-1、SHA-224、SHA-256、SHA-384，和SHA-512，由美國(guó)國(guó)家安全局(NSA)所設(shè)計(jì)，并由美國(guó)國(guó)家標(biāo)準(zhǔn)與技術(shù)研究院(NIST)發(fā)布；是美國(guó)的政府標(biāo)準(zhǔn)。后四者有時(shí)并稱為SHA-2。散列函數(shù)Hashsha256算法散列函數(shù)HashHash算法與加密算法

Hash算法是不可逆的，也就是不能通過輸出文本轉(zhuǎn)化回原文本。不同文本經(jīng)過Hash算法后可能輸出相同的結(jié)果。而加密算法是可逆的，每個(gè)加密算法都會(huì)有相應(yīng)的解密算法。原文與密文一一對(duì)應(yīng)。HMAC挑戰(zhàn)響應(yīng)HMACHMAC是密鑰相關(guān)的哈希運(yùn)算消息認(rèn)證碼（Hash-basedMessageAuthenticationCode）,HMAC運(yùn)算利用哈希算法，以一個(gè)密鑰和一個(gè)消息為輸入，生成一個(gè)消息摘要作為輸出。挑戰(zhàn)\響應(yīng)

客戶端發(fā)送一個(gè)消息作為挑戰(zhàn)給服務(wù)器，服務(wù)器使用事先存儲(chǔ)好的密鑰求MAC，發(fā)回客戶端，這是響應(yīng)。客戶端根據(jù)響應(yīng)來認(rèn)證。HMAC挑戰(zhàn)響應(yīng)挑戰(zhàn)\響應(yīng)ATSHA204AT88SC0104ATSHA204AlgorithmAtmelAlgorithmPublicSHA256Keylength64bit256bitInterfaceI2CSingleWire&I2CMemory1KB4KBNDArequirementYesNoAT88SC0104vsATSHA204ATSHA204SecurityFeaturesRobustCryptoAlgorithmSHA256MAC,HMACAdvancedMulti-LevelHWSecurityActiveshieldoverentirechipAllmemoriesinternallyencryptedInternalstateconsistencycheckingSecurityprotocolshardcodedSupplytamperprotectionInternalclockgenerationSecuretestmethods,noJTAGNodebugprobepoints,notestpadsDesignedtoDefendAgainst:‘Dumpster-diving’attacksMicroprobeattacksTimingattacksProtocolattacksFaultattacksPowercyclingJustasSecureasSmartCards!CompetitorsATMELATSHA204256bitslong.ATSHA204利用這些key作為HASH消息源的一部分。用于MAC,CheckMac,HMAC,GenDig指令。EEPROM的datazone的任意Slot可以存儲(chǔ)Key。(1)Diversifiedkeys根據(jù)產(chǎn)品序列碼生成key(2)RolledKeys:防止每次認(rèn)證都使用相同的key(3)CreatedKeys:根據(jù)已知的key產(chǎn)生新的key(4)Single-useKeys使用有次數(shù)限制(5)PasswordChecking密碼檢查(6)TransportKeys:傳輸key

KeyAccessoryAuthentication–HostChipDeviceChallengeResponseAccessoryATSHA204SecureKeyStorageSHA-256HashEngineRandomNumberGeneratorSecureKeyStorageSHA-256HashEngineDoTheyMatch?FIPSRNGAVRorARMMicroprocessorStopContinueATSHA204FirmwareAuthenticationCustomerBoardAVRorARMMicroprocessorATSHA204RandomNumberGeneratorKeyStorageSecureKeyStorageSHA-256HashCalculationSHA-256HashEngineDoTheyMatch?NoYesChallengeResponseDate/TimeSecretStorageCustomerBoardAVRorARMMicroprocessorATSHA204KeyStorageSecureKeyStorageSHA-256HashCalculationSHA-256HashEngineWriteReadRandomNumberGeneratorClearDatatoWriteClearDatatoReadClearDataClearDataCrytoDataCrytoDataMutualAuthentication

UniformityacrossentireproductlinesToolsauthenticatebatteriesbeforeallowinguseChargerAuthenticatesbatteriesbeforechargingBatteriesauthenticatechargerbeforechargingOnlyvalidproductscanbeusedtogetherManagingSubcontractorsChipLimitsSubcontractorActionsPreventunauthorizedoverbuildsOEMgivessubcontractorlimitedqtyofsecuritydevicesWarrantyTrackingSubcontractorlogsmfrdate,conditions,etcPersonalizechipforuseatonesubcontractoronlyMatchcorrectpartwithequipment/informationatthatsubconControlmodelnumbersbuiltbyparticularsubconSubcononlyhasauthenticationinformationforcertainmodelsSecureProgrammingFeature

ProtectssecretsatthirdpartysubcontractorsAtmelcansecurelyprogrampartsforhighvolumecustomersCustomer:“Wehavemoreproductssoldunderournamethatarenotproducedbyusthanwhatweproduce”CryptoAuthenticationKitsandSupportMultipleDemo/Eval/KitBoardsModularforcompatibilitywithSTK/EVKboardsSourceCodeLibraryCodeSpeedcustomerdevelopmentcycleExtensiveDocumentationQuickStartandHardwareUserGuidesApplicationNotesDemonstration/EvaluationPCSoftwareAtmelCryptoEvaluationStudio(ACES)AVRStudio5IntegrationSourceCodeLibraryOnline,noNDASupportsmostAVRandARMdevicesI2CorSingleWireIntfcSIO,UARTorSWGPIOIntegratedintoASFframework

KitsIntegratedWithAtmelDev.ToolsSTK600SAM7AT88CK101PluggableAdapterstoSTK/EKboardsSocketstosimplifylabprototypingAvailableformultiplepackagetypesSingleorDualchipforHost/ClientdevelopmentSourceCodeLibraryOnlineFullyintegratedintoASFframework

XplainedTopBoardMultipleCryptoAuthenticationChipsE