DS28E35 Datasheet, PDF (1/5 Pages) Maxim Integrated Products – DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM

DS28E35
ABRIDGED DATA SHEET
EVALUATION KIT AVAILABLE
DeepCover Secure Authenticator with
1-Wire ECDSA and 1Kb User EEPROM
General Description
DeepCover^® embedded security solutions cloak sensitive
data under multiple layers of advanced physical security
to provide the most secure key storage possible.
The DeepCover Secure Authenticator (DS28E35) pro-
vides a highly secure solution for a host controller to
authenticate peripherals based on the industry stan-
dard (FIPS 186) public-key based Elliptic Curve Digital
Signature Algorithm (ECDSA). The ECDSA engine com-
putes keys and signatures using a pseudorandom curve
over a prime field according to the “Standards for Efficient
Cryptography (SEC)”. The private and public key can
be computed by the device or installed by the user and
optionally locked. Separate memory space is set aside to
store and lock a public-key certificate as it is needed to
verify authenticity. In addition to ECDSA-related memory,
the device has 1024 bits of user memory that is organized
as four pages of 256 bits. Page protection modes include
write protection, read protection, and one-time-program-
mable (OTP) memory emulation modes. The DS28E35
also features a one-time settable, nonvolatile 17-bit dec-
rement-on-command counter, which can be used to keep
track of the lifetime of the object to which the DS28E35
is attached. Each device has its own guaranteed unique
64-bit ROM identification number (ROM ID) that is fac-
tory programmed into the chip. This unique ROM ID is
used as a fundamental input parameter for cryptographic
operations and also serves as an electronic serial number
within the application. The DS28E35 communicates over
the single-contact 1-Wire^® bus at overdrive speed. The
communication follows the 1-Wire protocol with the ROM
ID acting as node address in the case of a multi-device
1-Wire network.
Applications
● Authentication of Consumables
● Peripheral Authentication
● Medical Sensors
● Printer Cartridge Identification and Authentication
Ordering Information appears at end of data sheet.
For related parts and recommended products to use with this part, refer
to www.maximintegrated.com/DS28E35.related.
DeepCover and 1-Wire are registered trademarks of Maxim
Integrated Products, Inc.
Features
● ECDSA Engine for Public-Key Signature Using a
Defined SEC Domain Parameter Set
● On-Chip Hardware Random Number Generator
● Private and Public Key Can Be Computed by
the Device or Loaded from Outside with Optional
Automatic Locking
● Separate User-Programmable and Lockable Memory
Space to Store a Public-Key Certificate
● 17-Bit One-Time Settable, Nonvolatile Decrement-
On-Command Counter
● SHA-256 Engine to Compute a Hash of EEPROM
Page Data and Host Challenge for Subsequent
ECDSA Signing
● 1024 Bit of User EEPROM Organized as Four Pages
of 256 Bits
● Programmable and Irreversible User EEPROM
Protection Modes Including Write Protection, Read
Protection, and OTP/EPROM Emulation for Individual
Memory Pages
● Unique Factory-Programmed 64-Bit Identification
Number
● Single-Contact 1-Wire Interface Communicates with
Host at Up to 76.9kbps
● Operating Range: 3.3V ±10%, -40ºC to +85ºC
● ±8kV HBM ESD Protection (typ) for IO Pin
● 8-Pin TDFN and 6-Pin TSOC Packages
Typical Application Circuit
3.3V
R1
10kΩ
VCC
PIOX
µC
Q1
BSS84
PIOY
1-WIRE
GND
RPUP DS28E35
IO
GND
219-0028; Rev 2; 5/13