| RSVD (Bits 7–4): Reserved. Do not use. |
|
|
|
| DF_READ_EN (Bit 3): Enables data flash read in SEALED mode |
|
1 = |
Enables data flash read in SEALED mode. The host can read data flash parameters
without unsealing the device. This is useful for applications that need to verify
configuration without compromising security. |
|
0 = |
Data flash read in SEALED mode not allowed (default). The device must be unsealed
to read data flash parameters. |
|
|
|
| SHA1_SECURE (Bit 2): Enables secure memory usage for encryption key storage |
|
1 = |
Enables secure memory usage. When enabled, the authentication key is stored in
secure (OTP) memory. The key can only be written once and cannot be changed after
programming. This provides maximum security for production devices. |
|
0 = |
Disables secure memory usage (default). The authentication key is stored in
standard data flash and can be updated using AuthenticationKey() command
while in FULL ACCESS mode. |
|
|
|
| SPLIT_RESPONSE (Bit 1): Enables splitting of the authentication response into two 30-byte fields |
|
1 = |
Enables split response mode. The 60-byte authentication response (32-byte HMAC +
32-byte challenge echo, minus 4 bytes overhead) is divided into two 30-byte fields.
The host must read twice to retrieve the complete response. This mode is useful for
hosts with limited I2C buffer sizes. |
|
0 = |
Disables split response mode (default). The authentication response is returned as
a single 60-byte field in one read operation. |
|
|
|
| RSVD (Bit 0): Reserved. Do not use. |