Request DS28E50 Security User Guide
EVALUATION KIT AVAILABLE
Click here for production status of specific part numbers.
DS28E50
DeepCover Secure SHA-3 Authenticator
with ChipDNA PUF Protection
General Description
Benefits and Features
● Robust Countermeasures Protect Against Security
The DS28E50 secure authenticator combines FIPS202-
compliant secure hash algorithm (SHA-3) challenge
and response authentication with Maxim’s patented
ChipDNA™ technology, a physically unclonable function
(PUF) to provide a cost-effective solution with the ultimate
protection against security attacks. The ChipDNA imple-
mentation utilizes the random variation of semiconductor
device characteristics that naturally occur during wafer
fabrication. The ChipDNA circuit generates a unique
output value that is repeatable over time, temperature,
and operating voltage. Attempts to probe or observe
ChipDNA operation modifies the underlying circuit charac-
teristics thus preventing discovery of the unique value used
by the chip cryptographic functions. The DS28E50 utilizes
the ChipDNA output as key content to cryptographically
secure all device-stored data. With ChipDNA capability, the
device provides a core set of cryptographic tools derived
from integrated blocks including a SHA-3 engine, a FIPS/
NIST compliant true random number generator (TRNG),
2Kb of secured EEPROM, a decrement-only counter and
a unique 64-bit ROM identification number (ROM ID). The
unique ROM ID is used as a fundamental input parameter
for cryptographic operations and serves as an electronic
serial number within the application. The DS28E50 com-
municates over the single-contact 1-Wire® bus at both
standard and overdrive speeds. The communication fol-
lows the 1-Wire protocol with the ROM ID acting as node
address in the case of a multidevice 1-Wire network.
Attacks
• Patented Physically Unclonable Function Secures
Device Data
• Actively Monitored Die Shield Detects and Reacts
to Intrusion Attempts
• All Stored Data Cryptographically Protected from
Discovery
● Efficient Secure Hash Algorithm Authenticates
Peripherals
• FIPS 202-Compliant SHA-3 Algorithm for
Challenge/Response Authentication
• FIPS 198-Compliant Keyed-Hash Message
Authentication Code (HMAC)
• TRNG with NIST SP 800-90B Compliant Entropy
Source
● Supplemental Features Enable Easy Integration into
End Applications
• 17-Bit One-Time Settable, Nonvolatile Decrement-
Only Counter with Authenticated Read
• One GPIO Pin with Optional Authentication Control
• 2Kb of EEPROM for User Data, Key, and Control
Registers
• Unique and Unalterable Factory Programmed
64-Bit Identification Number (ROM ID)
• Single-Contact, 1-Wire Interface Communication
with Host at 11.7kbps and 62.5kbps
• Operating Range: 3.3V ±10%, -40°C to +85°C
• 6-Pin TDFN-EP Package (3mm x 3mm)
Applications
● Authentication of Medical Sensors and Tools
● Secure Management of Limited Use Consumables
● IoT Node Authentication
● Peripheral Authentication
● Reference Design License Management
● Printer Cartridge Identification and Authentication
Ordering Information appears at end of data sheet.
ChipDNA is a trademark and 1-Wire is a registered trademark
of Maxim Integrated Products, Inc.
19-100367; Rev 1; 9/18