Maxim
/
Products
/
Embedded Security
/
Secure Authentication
/
DS28E36
Embedded Security Secure Authentication DS28E36
Top

DS28E36

Download

DeepCover Secure Authenticator

Provides Affordable Elliptic-Curve Public-Key Authentication Security to Protect Your Development Investment

Printable Data Sheet Subscribe

Product Details

See parametric specs for Secure Authenticators

Key Features

See parametric specs for Secure Authenticators
Parametric specs for Secure Authenticators
Crypto Engine Asymmetric
Symmetric
End Equipment Access Control
Asset Tracking
IP Protection
Identification Systems
Medical Consumable ID
Medical Sensor Authentication and Calibration
PCB ID and Authentication
Print Cartridge Authentication
Printer Cartridge Configuration and Monitoring
Rack Card Security
Secure Access Control
Bus Type 1-Wire
Memory Type EEPROM
Memory Size 4K x 1
Deep Cover Yes
Oper. Temp. (°C) -40 to +85
Package/Pins TDFN/6
Budgetary
Price (See Notes) 		1.39
See parametric specs for Secure Authenticators
View Less

Simplified Block Diagram

Technical Docs

Data Sheet DeepCover Secure Authenticator May 07, 2020
App Note Add Control, Memory, Security, and Mixed-Signal Functions with a Single Contact
App Note Back to Basics: Secure Hash Algorithms | Maxim Integrated
App Note Communication Noise Immunity of 1-Wire
App Note Secure Authentication for Medical Disposables
User Guide DS28E39 Security User Guide
Tutorial Easily Add Memory, Security, Monitoring, and Control to Medical Sensors and Consumables
Tutorial Guide to 1-Wire Communication | Maxim Integrated
Tutorial How Secure Authenticators and Coprocessors Can Simplify Cryptography
Tutorial Cryptography: A Closer Look at the Algorithms
Tutorial Cryptography: Is a Hardware or Software Implementation More Effective?
Tutorial Cryptography: Planning for Threats and Countermeasures
Tutorial Cryptography: Fundamentals on the Modern Approach
Tutorial Cryptography: How It Helps in Our Digital World

Support & Training

Search our knowledge base for answers to your technical questions.

Filtered Search

Our dedicated team of Applications Engineers are also available to answer your technical questions. Visit our support portal .

Sampling:
Selecting the Sample button above will redirect to the third-party ADI Sample Site. The part selected will carry over to your cart on this site once logged in. Please create a new account there if you have never used the site before. Contact SampleSupport@analog.com with any questions regarding this Sample Site.

Parameters

Key Features

  • ECC-256 Compute Engine
    • FIPS 186 ECDSA P256 Signature and Verification
    • ECDH Key Exchange with Authentication Prevents Man-in-the-Middle Attacks
    • ECDSA Authenticated R/W of Configurable Memory
  • SHA-256 Compute Engine
    • FIPS 180 MAC for Secure Download/Boot Operations
    • FIPS 198 HMAC for Bidirectional Authentication and Optional GPIO Control
  • Two GPIO Pins with Optional Authentication Control
    • Open-Drain, 4mA/0.4V
    • Optional SHA-256 or ECDSA Authenticated On/Off and State Read
    • Optional Set On/Off after Multiblock Hash for Secure Boot/Download
  • RNG with NIST SP 800-90B Compliant Entropy Source with Function to Read Out
  • Optional Chip Generated Pr/Pu Key Pairs for ECC Operations
  • 17-Bit One-Time Settable, Nonvolatile Decrement-Only Counter with Authenticated Read
  • 8Kbits of EEPROM for User Data, Keys, and Certificates
  • Unique and Unalterable Factory Programmed 64-Bit Identification Number (ROM ID)
    • Optional Input Data Component to Crypto and Key Operations
  • Single-Contact 1-Wire Interface Communication with Host at 11.7kbps and 62.5kbps
  • Operating Range: 3.3V ±10%, -40°C to +85°C
  • 6-Pin TDFN-EP Package (3mm x 3mm)

Applications/Uses

  • Accessory and Peripheral Secure Authentication
  • IoT Node Crypto-Protection
  • Secure Boot or Download of Firmware and/or System Parameters
  • Secure Storage of Cryptographic Keys for a Host Controller

Description

The DS28E36 is a DeepCover® secure authenticator that provides a core set of cryptographic tools derived from integrated asymmetric (ECC-P256) and symmetric (SHA-256) security functions. In addition to the security services provided by the hardware implemented crypto engines, the device integrates a FIPS/NIST true random number generator (RNG), 8Kb of secured EEPROM, a decrement-only counter, two pins of configurable GPIO, and a unique 64-bit ROM identification number (ROM ID). This unique ROM ID is used as a fundamental input parameter for cryptographic operations and also serves as an electronic serial number within the application. The DS28E36 communicates over the single-contact 1-Wire® bus at overdrive speed. The communication follows the 1-Wire protocol with the ROM ID acting as node address in the case of a multidevice 1-Wire network.

The ECC public/private key capabilities operate from the NIST defined P-256 curve and include FIPS 186 compliant ECDSA signature generation and verification to support a bidirectional asymmetric key authentication model. The SHA-256 secret-key capabilities are compliant with FIPS 180 and are flexibly used either in conjunction with ECDSA operations or independently for multiple HMAC functions.

Two GPIO pins can be independently operated under command control and include configurability supporting authenticated and nonauthenticated operation including an ECDSA-based crypto-robust mode to support secure-boot of a host processor.

DeepCover embedded security solutions cloak sensitive data under multiple layers of advanced security to provide the most secure key storage possible. To protect against device-level security attacks, invasive and noninvasive countermeasures are implemented including active die shield, encrypted storage of keys, and algorithmic methods.


Secure Boot and Secure Download -
Part 1: Protecting IoT Devices with Secure Authentication


Secure Boot and Secure Download -
Part 3: Using the DS28C36


Secure Boot and Secure Download -
Part 2: Technologies Behind Embedded Security

Simplified Block Diagram

DS28E36: Simplified Block Diagram DS28E36: Simplified Block Diagram Zoom icon

Technical Docs

Data Sheet DeepCover Secure Authenticator May 07, 2020
App Note Add Control, Memory, Security, and Mixed-Signal Functions with a Single Contact
App Note Back to Basics: Secure Hash Algorithms | Maxim Integrated
App Note Communication Noise Immunity of 1-Wire
App Note Secure Authentication for Medical Disposables
User Guide DS28E39 Security User Guide
Tutorial Easily Add Memory, Security, Monitoring, and Control to Medical Sensors and Consumables
Tutorial Guide to 1-Wire Communication | Maxim Integrated
Tutorial How Secure Authenticators and Coprocessors Can Simplify Cryptography
Tutorial Cryptography: A Closer Look at the Algorithms
Tutorial Cryptography: Is a Hardware or Software Implementation More Effective?
Tutorial Cryptography: Planning for Threats and Countermeasures
Tutorial Cryptography: Fundamentals on the Modern Approach
Tutorial Cryptography: How It Helps in Our Digital World

Support & Training

Search our knowledge base for answers to your technical questions.

Filtered Search

Our dedicated team of Applications Engineers are also available to answer your technical questions. Visit our support portal .

Sampling:
Selecting the Sample button above will redirect to the third-party ADI Sample Site. The part selected will carry over to your cart on this site once logged in. Please create a new account there if you have never used the site before. Contact SampleSupport@analog.com with any questions regarding this Sample Site.