This is a summary document.
The complete document is
available on the Atmel website
at www.atmel.com.
Atmel-8763DS-CryptoAuth-ATAES132-SPI-Datasheet-Summary_072014
NOT RECOMMENDED
FOR
NEW
DESIGNS
Replaced by
ATAES132A
Features
32Kb standard Serial EEPROM User Memory
Compatible with the Atmel
®
AT2530B
16 user zones of 2Kb each
High-security features
AES algorithm with 128-bit keys
AES-CCM for authentication
Message Authentication Code (MAC) for cryptographic operations
Secure storage for sixteen 128-bit keys
Encrypted User Memory Read and Write
FIPS Random Number Generator
16 high-endurance monotonic EEPROM counters
Flexible, user-configurable security
User zone access rights independently configured
Authentication prior to zone access
Read/Write, encrypted, or read-only user zone options
10MHz serial interface
2.5V to 5.5V supply, <250nA sleep
Packages: SOIC or UDFN
Serial EEPROM compatible pinout
-40C to +85C operating temperature
Benefits
Add security without retooling printed circuit board by just replacing an
existing Serial EEPROM.
Authenticate consumables
Authenticate components
Authenticate network access
Protect sensitive firmware
Secure confidential data
Prevent enablement of unpaid for features
Manage contract manufacturers from overbuilds
Manage warranty claims
Securely store complete identify including fingerprints and pictures
ATAES132
32Kb AES Serial EEPROM Specification
SPI SUMMARY DATASHEET
ATAES132 [SPI SUMMARY DATASHEET]
Atmel-8763DS-CryptoAuth-ATAES132-SPI-Datasheet-Summary_072014
2
Description
The Atmel ATAES132 is a high-security, Serial Electrically Erasable and Programmable Read-Only Memory (EEPROM)
providing both authentication, confidential, nonvolatile data storage capabilities. Access restrictions for the sixteen user
zones are independently configured, and any key can be used with any zone. Keys can also be used for standalone
authentication. This flexibility permits the ATAES132 to be used in a wide range of applications.
The AES-128 cryptographic engine operates in AES-CCM mode to provide authentication, stored data
encryption/decryption, and message authentication codes. Both internally stored data and/or small quantities of external
data can be protected by the ATAES132 device.
The ATAES132 pinout is compatible with standard Serial EEPROMs to allow placement on existing PC boards. The
Serial EEPROM portion of the ATAES132 instruction set is identical to the Atmel Serial EEPROM instruction set. The
ATAES132’s extended security functions are accessed by sending command packets to the ATAES132 using standard
Write instructions and reading responses using standard read instructions. The ATAES132 secure Serial EEPROM
architecture allows it to be inserted into existing applications.
The ATAES132 device incorporates multiple physical security mechanisms to prevent release of the internally stored
secrets. Secure personalization features are provided to facilitate third-party product manufacturing.
Table 1. Package Pin List
Figure 1. Pin Configurations
Pad Description SOIC UDFN
V
CC
Supply Voltage 8 8
GND Ground 4 4
SCK Serial Clock Input 6 6
SI Serial Data Input 5 5
CS SPI Chip Select Input 1 1
SO Serial Data Output 2 2
CS
SO
NC
GND
1
2
3
4
8
7
6
5
SOIC
V
CC
NC
SCL
SDA
Top View
UDFN
Bottom View
V
CC
NC
SCK
SI
CS
SO
NC
GND
1
2
3
4
8
7
6
5
Note: Drawings are not to scale.
3
ATAES132 [SPI SUMMARY DATASHEET]
Atmel-8763DS-CryptoAuth-ATAES132-SPI-Datasheet-Summary_072014
1. Security
1.1 Advanced Encryption Standard (AES)
The ATAES132 cryptographic functions are implemented with a hardware cryptographic engine using the Advanced
Encryption Standard (AES) in the CCM (Counter mode Cipher block chaining Message authentication code) mode with
128-bit keys. AES-CCM mode provides both confidentiality and integrity checking with a single key. The integrity MAC
includes both the encrypted data and additional authenticate-only data bytes, as described in each command definition.
Each MAC is unique due to inclusion of a nonce and an incrementing MacCount register in the MAC calculation.
1.2 Hardware Security Features
The ATAES132 device contains physical security features to prevent an attacker from determining the internal secrets.
The ATAES132 includes tamper detectors for voltage, temperature, frequency, and light, as well as an active metal
shield over the circuitry, internal memory encryption, and various other features. The ATAES132 physical design and
cryptographic protocol are architected to prevent or significantly complicate most algorithmic, timing, and side-channel
attacks.
2. Device Internal Regions
Seven distinct regions make up the internal organization of the ATAES132: User Memory, Information Region,
Configuration Memory, Counters, Key Memory, SmallZone, and I/O Support regions.
Figure 2-1. Device Internal Regions
2.1 User Memory
The User Memory is comprised of 32Kb of nonvolatile memory, segmented into 16 zones. Access to the zones is
independently configurable to offer access restrictions, from open access, as in any standard Serial EEPROM, to full
restrictions that preclude Read/Write operations and will only permit internal, authenticated use for such data as security
keys.
2.2 Information Region
The information region holds read-only identification information, such as unique die serial numbers and other
information pertaining to the ATAES132.
User Memory (32Kb)
Information Region (36 bytes)
Configuration Memory (165 bytes)
Counters (2Kb)
Key Memory (2Kb)
Small Zone (32 bytes)
Free Space (96 bytes)
I/O Support SRAM

ATAES132-SH-EQ-T

Mfr. #:
Manufacturer:
Microchip Technology / Atmel
Description:
Security ICs / Authentication ICs AES 32Kbit EE SPI
Lifecycle:
New from this manufacturer.
Delivery:
DHL FedEx Ups TNT EMS
Payment:
T/T Paypal Visa MoneyGram Western Union

Products related to this Datasheet