ABRIDGED DATA SHEET Evaluation Kit Design Tools Support Available Resources and Models Click here to ask an associate for production status of specific part numbers. DeepCover Secure Authenticator with DS28E22 1-Wire SHA-256 and 2Kb User EEPROM General Description Features M DeepCover embedded security solutions cloak sensitive Symmetric Key-Based Bidirectional Secure data under multiple layers of advanced physical security to Authentication Model Based on SHA-256 provide the most secure key storage possible. Dedicated Hardware-Accelerated SHA Engine for The DeepCover Secure Authenticator (DS28E22) com- Generating SHA-256 MACs bines crypto-strong, bidirectional, secure challenge-and- Strong Authentication with a High Bit Count, User- response authentication functionality with an implemen- Programmable Secret, and Input Challenge tation based on the FIPS 180-3-specified Secure Hash 2048 Bits of User EEPROM Partitioned Into 8 Pages Algorithm (SHA-256). A 2Kb user-programmable EEPROM of 256 Bits array provides nonvolatile storage of application data and User-Programmable and Irreversible EEPROM additional protected memory holds a read-protected secret Protection Modes Including Authentication, Write and for SHA-256 operations and settings for user memory Read Protect, and OTP/EPROM Emulation control. Each device has its own guaranteed unique 64-bit ROM identification number (ROM ID) that is factory pro- Unique, Factory-Programmed 64-Bit Identification grammed into the chip. This unique ROM ID is used as a Number fundamental input parameter for cryptographic operations Single-Contact 1-Wire Interface Communicates with and also serves as an electronic serial number within Host at Up to 76.9kbps the application. A bidirectional security model enables Operating Range: 3.3V 10%, -40NC to +85NC two-way authentication between a host system and slave- embedded DS28E22. Slave-to-host authentication is used Low-Power 5A (typ) Standby by a host system to securely validate that an attached or 8kV Human Body Model ESD Protection (typ) embedded DS28E22 is authentic. Host-to-slave authenti- 6-Pin TDFN, 6-Lead TSOC Packages cation is used to protect DS28E22 user memory from being modified by a nonauthentic host. The SHA-256 message Typical Application Circuit authentication code (MAC), which the DS28E22 gener- ates, is computed from data in the user memory, an on- chip secret, a host random challenge, and the 64-bit ROM 3.3V ID. The DS28E22 communicates over the single-contact R P M 1-Wire bus at overdrive speed. The communication fol- R = 1.1k P VCC 2 MAXIMUM I C BUS CAPACITANCE 320pF lows the 1-Wire protocol with the ROM ID acting as node SDA 2 (I C PORT) SCL address in the case of a multiple-device 1-Wire network. DS2465 C Applications 1-Wire LINE SLPZ IO Authentication of Network-Attached Appliances Printer Cartridge ID/Authentication DS28E22 Reference Design License Management System Intellectual Property Protection Sensor/Accessory Authentication and Calibration Secure Feature Setting for Configurable Systems Key Generation and Exchange for Cryptographic Systems Ordering Information appears at end of data sheet. DeepCover and 1-Wire are registered trademarks of Maxim Integrated Products, Inc. 219-0020 Rev 3 7/21 2021 Analog Devices, Inc. All rights reserved. Trademarks and registered trademarks are the property of their respective owners. One Analog Way, Wilmington, MA 01887 U.S.A. Tel: 781.329.4700 2021 Analog Devices, Inc. All rights reserved.ABRIDGED DATA SHEET DS28E22 DeepCover Secure Authenticator with 1-Wire SHA-256 and 2Kb User EEPROM ABSOLUTE MAXIMUM RATINGS IO Voltage Range to GND ...................................... -0.5V to 4.0V Storage Temperature Range ............................ -55NC to +125NC IO Sink Current ...................................................................20mA Lead Temperature (soldering, 10s) ................................+300NC Operating Temperature Range .......................... -40NC to +85NC Soldering Temperature (reflow) ......................................+260NC Junction Temperature .....................................................+150NC Stresses beyond those listed under Absolute Maximum Ratings may cause permanent damage to the device. These are stress ratings only, and functional operation of the device at these or any other conditions beyond those indicated in the operational sections of the specifications is not implied. Exposure to absolute maximum rating conditions for extended periods may affect device reliability. ELECTRICAL CHARACTERISTICS (T = -40NC to +85NC, unless otherwise noted.) (Note 1) A PARAMETER SYMBOL CONDITIONS MIN TYP MAX UNITS IO PIN: GENERAL DATA 1-Wire Pullup Voltage V (Note 2) 2.97 3.63 V PUP 1-Wire Pullup Resistance R V = 3.3V Q 10% (Note 3) 300 1500 I PUP PUP Input Capacitance C (Notes 4, 5) 1500 pF IO Input Load Current I IO pin at V 5 19.5 FA L PUP High-to-Low Switching Threshold V (Notes 6, 7) 0.65 x V V TL PUP Input Low Voltage V (Notes 2, 8) 0.3 V IL Low-to-High Switching Threshold V (Notes 6, 9) 0.75 x V V TH PUP Switching Hysteresis V (Notes 6, 10) 0.3 V HY Output Low Voltage V I = 4mA (Note 11) 0.4 V OL OL Recovery Time t 5 R = 1500I (Notes 2, 12) Fs REC PUP Time-Slot Duration t (Notes 2, 13) 13 Fs SLOT IO PIN: 1-Wire RESET, PRESENCE-DETECT CYCLE Reset Low Time t (Note 2) 48 80 Fs RSTL Reset High Time t (Note 14) 48 Fs RSTH Presence-Detect Sample Time t (Notes 2, 15) 8 10 Fs MSP IO PIN: 1-Wire WRITE Write-Zero Low Time t (Notes 2, 16) 8 16 Fs W0L Write-One Low Time t (Notes 2, 16) 0.25 2 Fs W1L IO PIN: 1-Wire READ Read Low Time t (Notes 2, 17) 0.25 2 - d Fs RL Read Sample Time t (Notes 2, 17) t + d 2 Fs MSR RL EEPROM Programming Current I V = 3.63V (Notes 5, 18) 1 mA PROG PUP Programming Time for a 32-Bit t 10 ms PRD Segment or Page Protection Refer to the full data sheet. Programming Time for the Secret t 100 ms PRS Write/Erase Cycling Endurance N T = +85NC (Notes 21, 22) 100k CY A Data Retention t T = +85NC (Notes 23, 24, 25) 10 Years DR A Analog Devices 2 www.analog.com