ESP32 Forum

Hello,

I am trying to configure the ESP32 with ATECC608. My goal is to connect to AWS over a TLS connection. However, I would like to utilize the HW acceleration/security features of the ECC608 during the TLS handshake (specifically, the ECDSA signature verification).

It would be preferable to use either Arduino IDE or ESP-IDF for this process, since I already have an AWS project set up in these environments. Configuring with ECC508 would also be okay, since the procedure should be the same.

Basically, I just want to know if anyone has any experience communicating with the ECC608/508 with the ESP32, and if they could help point me in the right direction.

Thanks in advance.

hi sir,

to u have news me too i want to use ATECC608A with ESP32 ?

Hi @GerryTitan @mohasrj , Thanks for the request,
Actually we are currently developing an example on how to use ATECC608A with ESP32 ( i.e. ESP32-WROOM32-SE), The example is nearly complete, and by the next week we will be able to provide you the preview of the example which you will be able to build and test with your application.

Thanks for the response. I have actually succeeded in pairing with the ECC608 since my initial post.

ESP_flying_raijin wrote: ↑

Thu Jan 30, 2020 12:44 pm

Hi @GerryTitan @mohasrj , Thanks for the request,
Actually we are currently developing an example on how to use ATECC608A with ESP32 ( i.e. ESP32-WROOM32-SE), The example is nearly complete, and by the next week we will be able to provide you the preview of the example which you will be able to build and test with your application.

293/5000
I am trying to provision Azure with ATECC608A and ESP32. At the moment I am following the example https://github.com/kmwebnet/ECC608-AzureIoT-Connect but there are misdirected libraries. Now I am trying in my environment with Eclipse and ESP-IDF and Azure-SDK, but I have not yet achieved

Hi,

@ESP_flying_raijin where can I found that example?

Hi,
I'm interested about it. Where I can found the example?

Thank you in advance

Hi @GerryTitan.
I´m also working to get this working and wounder if you are willing to share your code ?

Hi,

For those that are looking for the example, here's the link: atecc608_ecdsa example

Hello All,

I have been perusing through the sample code associated with the use of the ECC608 and I see that the private key is being extracted from the device using atca_mbedtls_pk_init() in order to complete the initialization of the tlsDataParams structure. It appears the mbedTLS implementation handles all the TLS handshake requirements "under the hood", so it would be necessary that it has access to the device certificate, CA certificate and the private key.

We currently have a product using a different radio and an ECC508 to store our secrets. The ECC508 is not directly accessible by the radio, but is connected to the host microcontroller which utilizes several other key storage locations and the hardware crypto engine to accomplish other tasks. The original radio interface passes all crypto requests to the host controller which acts as the liaison to the ECC508. This allows the ECC508 to handle all crypto requests, keeping the private key(s) secure.

We are considering modifying our product to use the ESP32. I was wondering if there is any way to redirect the cryptography requests (cert verify, ECDH, signing, etc.) to the host controller as our current radio does, allowing the ECC508 to conduct secure operations.

Thanks in advance,
Mark