DeepCover Secure Authenticator with 1-Wire SHA-256 and 4Kb User EEPROM

Protect Your Development Investment with Crypto-Strong Authentication and Advanced Physical Security

Please check latest availability status for a specific part variant.


DeepCover® embedded security solutions cloak sensitive data under multiple layers of advanced physical security to provide the most secure key storage possible.

The DeepCover Secure Authenticator (DS28E25) combines secure challenge-and-response authentication functionality based on the FIPS 180-3-specified Secure Hash Algorithm (SHA-256) with 4Kb of user-programmable EEPROM. Additional secure memory holds a secret/key for SHA-256 operations. Each device has its own guaranteed unique 64-bit ROM identification number (ROM ID) that is factory programmed into the chip. The SHA-256 message authentication code (MAC), which the DS28E25 generates, is computed from data in the user memory, the SHA-256 secret, a host controller random challenge, and the 64-bit ROM ID. A secure and low-cost factory-programming service is available to pre-program device data including the SHA-256 secret. The DS28E25 communicates over Maxim's single-contact 1-Wire® bus.

Our Secure Drug Delivery video shows how Maxim security products can be used to authenticate remote drug delivery.
DS28E25: Typical Application Circuit DS28E25: Typical Application Circuit Enlarge+

Key Features

  • Symmetric-Key-Based Bidirectional Secure Authentication Model Based on SHA-256
  • Sophisticated Die-Level Methods and Circuits for Tamper Protection of Sensitive Data and Signals
  • Dedicated Hardware-Accelerated SHA Engine for Generating SHA-256 MACs
  • Strong Authentication with a High Bit Count, User-Programmable Secret, and Input Challenge
  • 4096 Bits of User EEPROM Partitioned Into 16 Pages of 256 Bits
  • User-Programmable and Irreversible EEPROM Protection Modes Including Authentication, Write and Read Protect, and OTP/EPROM Emulation
  • Unique, Factory-Programmed 64-Bit Identification Number
  • Single-Contact 1-Wire Interface Communicates with Host at Up to 76.9kbps
  • Operating Range: 3.3V ±10%, -40°C to +85°C
  • ±8kV HBM ESD Protection (typ)
  • 2-Pin SFN, 2-Pin TO-92, 6-Pin TDFN, and 6-Pin TSOC Packages


  • Identification and authentication of consumables
  • Reference Design License Management
  • Sensor/Accessory Authentication and Calibration
  • System Intellectual Property Protection
Part NumberCrypto EngineApplicationsMemory TypeMemory SizeBus TypeVSUPPLY
Deep CoverOper. Temp.
See Notes
DS28E25 Symmetric
IP Protection
Medical Consumable ID
PCB ID and Authentication
Print Cartridge Authentication
Rack Card Security
EEPROM4K x 11-Wire2.97 to 3.63Yes-40 to +85
$0.98 @1k
See All Secure Authenticators (28)
Pricing Notes:
This pricing is BUDGETARY, for comparing similar parts. Prices are in U.S. dollars and subject to change. Quantity pricing may vary substantially and international prices may differ due to local duties, taxes, fees, and exchange rates. For volume-specific and version-specific prices and delivery, please see the price and availability page or contact an authorized distributor.

DS28E25EVKIT: Evaluation System for the DS28E25 and DS2465

Tools & Models

  • DS28E25 IBIS Model
  • CAD Symbols and Footprints

  • DS28E25+
  • DS28E25+T
  • DS28E25-W34+2
  • DS28E25-W34+4
  • DS28E25-W34+5
  • DS28E25G+T
  • DS28E25G+U
  • DS28E25P+
  • DS28E25P+T
  • DS28E25P-W34+1
  • DS28E25P-W34+1T
  • DS28E25P-W34+3
  • DS28E25P-W34+3T
  • DS28E25Q+T
  • DS28E25Q+U
  • DS28E25Q-W20+1T
  • DS28E25Q-W20+1U
  • Device   Fab Process   Technology   Sample size   Rejects   FIT at 25°C   FIT at 55°C  

    Note : The failure rates are summarized by technology and mapped to the associated material part numbers. The failure rates are highly dependent on the number of units tested.

    Quality Management System >
    Environmental Management System >


    Related Resources

    Deep Cover Automotive I²C Authenticator

    • ECC-P256 Compute Engine
    • SHA-256 Compute Engine
    • SHA-256 One-Time Pad Encrypted R/W of Configurable Memory Using an ECDH Established Key

    1-Wire SHA-3 Secure Authenticator

    • Robust Countermeasures Protect Against Security Attacks
    • Efficient Secure Hash Algorithm Authenticates Peripherals
    • Supplemental Features Enable Easy Integration into End Applications

    DeepCover Radiation Resistant, High-Capacity 1-Wire Secure Authenticator

    • High Radiation Resistance Allows User-Programmable Manufacturing or Calibration Data Before Medical Sterilization
    • ECC-P256 Compute Engine
    • SHA-256 Compute Engine

    DeepCover Secure ECDSA Bidirectional Authenticator with ChipDNA PUF Protection

    • Robust Countermeasures Protect Against Security Attacks
    • ECDSA Authenticated R/W of Stored Data and Counter
    • Efficient Public-Key Authentication Solution to Authenticate Peripherals

    Electronics in Vehicles (ELIV) 2019
    10/16/2019 - 10/17/2019, Bonn, Germany
    The international VDI Congress ELIV (Electronics In Vehicles) is THE event for all experts in the field of electrical and electronical car engineering and integration of mechanical and electronical systems.