DS28C36

DeepCover Secure Authenticator

Provides Affordable Elliptic-Curve Public-Key Authentication Security to Protect Your Development Investment

Buy Now

Production

Top

Overview

Features and Benefits
Product Details

Features and Benefits

ECC-256 Compute Engine
- FIPS 186 ECDSA P256 Signature and Verification
- ECDH Key Exchange with Authentication Prevents Man-in-the-Middle Attacks
- ECDSA Authenticated R/W of Configurable Memory
FIPS 180 SHA-256 Compute Engine
- HMAC
SHA-256 OTP (One-Time Pad) Encrypted R/W of Configurable Memory Through ECDH Established Key
Two GPIO Pins with Optional Authentication Control
- Open-Drain, 4mA/0.4V
- Optional SHA-256 or ECDSA Authenticated On/Off and State Read
- Optional ECDSA Certificate to Set On/Off after Multiblock Hash for Secure Boot
RNG with NIST SP 800-90B Compliant Entropy Source with Function to Read Out
Optional Chip Generated Pr/Pu Key Pairs for ECC Operations
17-Bit One-Time Settable, Nonvolatile Decrement-Only Counter with Authenticated Read
8Kbits of EEPROM for User Data, Keys, and Certificates
Unique and Unalterable Factory Programmed 64-Bit Identification Number (ROM ID)
- Optional Input Data Component to Crypto and Key Operations
I²C Communication Up to 1MHz
Operating Range: 2.2V to 3.63V, -40°C to +85°C
6-Pin TDFN Package

Product Details

The DS28C36 is a DeepCover^® secure authenticator that provides a core set of cryptographic tools derived from integrated asymmetric (ECC-P256) and symmetric (SHA-256) security functions. In addition to the security services provided by the hardware implemented crypto engines, the device integrates a FIPS/NIST true random number generator (RNG), 8Kb of secured EEPROM, a decrement-only counter, two pins of configurable GPIO, and a unique 64-bit ROM identification number (ROM ID).

The ECC public/private key capabilities operate from the NIST defined P-256 curve and include FIPS 186 compliant ECDSA signature generation and verification to support a bidirectional asymmetric key authentication model. The SHA-256 secret-key capabilities are compliant with FIPS 180 and are flexibly used either in conjunction with ECDSA operations or independently for multiple HMAC functions.

Two GPIO pins can be independently operated under command control and include configurability supporting authenticated and nonauthenticated operation including an ECDSA-based crypto-robust mode to support secure-boot of a host processor.

DeepCover embedded security solutions cloak sensitive data under multiple layers of advanced security to provide the most secure key storage possible. To protect against device-level security attacks, invasive and noninvasive countermeasures are implemented including active die shield, encrypted storage of keys, and algorithmic methods.

Explore security topics and test drive secure authenticators with the Maxim Security Lab

Secure Boot and Secure Download -
Part 1: Protecting IoT Devices with Secure Authentication

Secure Boot and Secure Download -
Part 3: Using the DS28C36

Secure Boot and Secure Download -
Part 2: Technologies Behind Embedded Security

Applications

Accessory and Peripheral Secure Authentication
IoT Node Crypto-Protection
Secure Boot or Download of Firmware and/or System Parameters
Secure Storage of Cryptographic Keys for a Host Controller

Product Categories

Embedded Security and 1-Wire
- Secure Authenticators

Complete documentation is available upon completion of a Non-Disclosure Agreement (NDA). To request an NDA, click here.

Comparable Parts Click to see all in Parametric Search

Product Lifecycle Production

At least one model within this product family is in production and available for purchase. The product is appropriate for new designs but newer alternatives may exist.

Evaluation Kits (3)

DS28C36EVKIT

Evaluation Kit for the DS28C36 and DS2476

DS9481P-300

USB-to-1-Wire/I²C Adapter

MAXAUTHDEMO

DeepCover Secure Authenticator Demonstration Kit

DS28C36EVKIT

View Detailed Evaluation Kit Information

The DS28C36 evaluation system (EV system) provides the hardware and software necessary to evaluate the DS28C36 and DS2476. The EV system consists of five DS28C36/DS2476 devices in a 6-pin TDFN package, a DS9121AQ+ evaluation TDFN socket board, and a DS9481P-300# USB-to-I²C/1-Wire^® adapter. The evaluation software runs on Windows^® 10, Windows 8, and Windows 7 operating systems (64- and 32-bit versions). The EV system provides a handy user interface to exercise the features of the DS28C36 and DS2476.

Features & Benefits

Demonstrates the Features of the DS28C36 DeepCover^® Secure Authenticator
Demonstrates the Features of the DS2476 DeepCover Secure Coprocessor
I²C Communication is Logged to Aid Firmware Designers Understanding of the DS2476 and DS28C36
I²C-USB Adapter Creates a Virtual COM Port on Any PC
Fully Compliant with USB Specification v2.0
Software Runs on Windows 10, Windows 8, and Windows 7 for Both 64-Bit and 32-Bit Versions
3.3V ±3% 1-Wire Operating Voltage
Convenient On-Board Test Points and TDFN Socket
Evaluation Software Available by Request
Proven PCB Layout
Fully Assembled and Tested

Resources

DS9481P-300

View Detailed Evaluation Kit Information

The DS9481P-300 is a USB-to-1-Wire^®/I²C adapter for easy PC connectivity to 1-Wire and I²C devices. The adapter provides a 6-pin female connector with the signals to communicate with 1-Wire and I²C devices that support a 3.3V data I/O level. The DS9481P-300 driver runs on Windows^®10, Windows 8, and Windows 7 operating systems, both 64-bit and 32-bit versions. The virtualized COM port provides a convenient communication interface.

Features & Benefits

Driver Support for Windows 10, Windows 7Operating Systems
1-Wire/I²C USB Adapter Creates a Virtual COM Porton Windows, Linux, and Mac Operating Systems
Emulates the DS2480B Command Set
3.3V Read/Write Operation to 1-Wire
Supports Standard and Overdrive 1-WireCommunication
Strong Pullup to 3.3V Provides the Additional CurrentRequired for 1-Wire EEPROM, EnvironmentalSensors, and Cryptographic Devices
1-Wire Active Pullup Accommodates Long Lines
3.3V I²C Operation with SDA and SCL Pullups
Supports I²C Speeds of 100kHz and 400kHz
6-Pin Female Interface
Fully Compliant with USB Specification v2.0

MAXAUTHDEMO

View Detailed Evaluation Kit Information

The MAXAUTHDEMO demonstrates use case examples for DeepCover^® Secure Authenticators. It comprises hardware (as pictured) that is operated from USB 2.0 and a web-based GUI to demonstrate how the functional capabilities of Maxim’s Secure Authenticators are used in various end equipment scenarios. The GUI operates from a web browser such as Chrome™.

Part	Application
MAXAUTHDEMO1	Asymmetric ECDSA and symmetric SHA-256 operation of DS28C36
MAXAUTHDEMO2	Asymmetric ECDSA operation of DS28E38

Applications

Counterfeit Prevention
IoT Device Authenticity and Message Integrity
Product Quality and Safety
Secure Download/Boot
Use/Feature Control

Features & Benefits

USB 2.0 Connected Hardware for Simple Setup and Operation
Secure Authenticator Hardware Module for Use Case Demonstration
Web-Based GUI for Step-by-Step Explanation of Secure Authenticator Use Scenario

Documentation & Resources

Data Sheets

DS28C36: DeepCover Secure Authenticator Data Sheet (Rev. 3)
2/3/2021

PDF

299K

Reliability Data

DS28C36 Reliability Data
1/12/2023

PDF

66K

User Guides

UG-6389: MAXREFDES155# Quick Start Guide
3/3/2017

PDF

1M

Product Highlight

ecc-sha2-deepcover-1-wire-secure-authenticator-ebrief
10/10/2022

PDF

379K

Design Notes

Design Note- ds11-operate-general-purpose-io-with-strong-security
10/10/2022

PDF

173K
Implementing Secure Authentication Without Being a Cryptography Expert
3/6/2017

Technical Articles

How Secure Authenticators and Coprocessors Can Simplify Cryptography
8/3/2020
Cryptography: Planning for Threats and Countermeasures
7/20/2020
Cryptography: Is a Hardware or Software Implementation More Effective?
7/8/2020
Cryptography: A Closer Look at the Algorithms
6/3/2020
Cryptography: Fundamentals of the Modern Approach
5/29/2020
Cryptography: How It Helps in Our Digital World
5/26/2020
Back to Basics: Secure Hash Algorithms
6/13/2019
Secure Authentication for Medical Disposables
4/5/2019
Why Now is a Good Time to Secure Your Embedded Systems with SHA-3
2/26/2019
The Fundamentals of Secure Boot and Secure Download: How to Protect Firmware and Data within Embedded Devices
5/19/2017
Injection Molding an IC into a Connector or Consumable Item
8/3/2010

Tools & Simulations

Design Tools

DeepCover® Security Lab

Software Development

MAXAUTHDEMO1 Software, 1.1.2

MSI

DS28E36EVKIT Software Lite, 1.6.0

ZIP

Security Lab Software, 1.2.0

EXE

Reference Designs (1)

MAXREFDES155

DeepCover Embedded Security in an IoT: Public-Key Secured Data Paths

MAXREFDES155

DeepCover Embedded Security in an IoT: Public-Key Secured Data Paths

MAXREFDES155

DeepCover Embedded Security in an IoT: Public-Key Secured Data Paths

View Detailed Reference Design Information

Features & Benefits

Features

Public-key infrastructure to authenticate nodes and messages
ECDSA-P256 public-key authentication
SHA-256 HMAC secret-key authentication
Securely controls on/off operation of IoT device endpoints
Demonstrates secure download for remote update of an IoT device configuration file
DeepCover secure key storage and protection
Wifi interface for communication to a web server

Competitive Advantages

Crypto-strong authentication
No need for secure-key storage memory on processor
Low-overhead performance for signed data between the web server and the mbed platform

Parts Used

Resources

MAXREFDES155 Design Files

ZIP

2.19 M

Product Recommendations

DS28C36 Companion Parts

Recommended Related Parts

DS2476.

Design Resources

ADI has always placed the highest emphasis on delivering products that meet the maximum levels of quality and reliability. We achieve this by incorporating quality and reliability checks in every scope of product and process design, and in the manufacturing process as well. "Zero defects" for shipped products is always our goal.

Quality And Reliability

Symbols and Footprints

Request Product/Process Change Notifications

Save to myAnalog

Support & Discussions

Contact ADI Technical Support »

Ask your question »

Contact ADI Technical Support »

Ask your question »

Sample & Buy

Ordering FAQs

See our Ordering FAQs for answers to questions about online orders, payment options and more.

Buy Now Pricing

(**) Displayed Buy Now Price and Price Range is based on small quantity orders.

List Pricing

(*)The 1Ku list pricing shown is for BUDGETARY USE ONLY, shown in United States dollars (FOB USA per unit for the stated volume), and is subject to change. International prices may differ due to local duties, taxes, fees and exchange rates. For volume-specific price or delivery quotes, please contact your local Analog Devices, Inc. authorized distributor. Pricing displayed for Evaluation Boards and Kits is based on 1-piece pricing.

Lead Times

Please see the latest communication from our CCO regarding lead times.

Sampling

Selecting the Sample button above will redirect to the third-party ADI Sample Site. The part selected will carry over to your cart on this site once logged in. Please create a new account there if you have never used the site before. Contact SampleSupport@analog.com with any questions regarding this Sample Site.

Price Table Help

Evaluation Boards

Pricing displayed is based on 1-piece.

Up to two boards can be purchased through Analog.com. To order more than two, please purchase through one of our listed distributors.

Pricing displayed is based on 1-piece. The USA list pricing shown is for budgetary use only, shown in United States dollars (FOB USA per unit), and is subject to change. International prices may vary due to local duties, taxes, fees and exchange rates.