general description the DS28C36 is a secure authenticator that provides a core set of cryptographic tools derived from integrated asymmetric (ecc-p256) and symmetric (sha-256) secu - rity functions. in addition to the security services provided by the hardware implemented crypto engines, the device integrates a fips/nist true random number genera - tor (rng), 8kb of secured eeprom, a decrement-only counter, two pins of configurable gpio, and a unique 64-bit rom identification number (rom id). the ecc public/private key capabilities operate from the nist defined p-256 curve and include fips 186 compliant ecdsa signature generation and verification to support a bidirectional asymmetric key authentication model. the sha-256 secret-key capabilities are compli - ant with fips 180 and are flexibly used either in conjunc - tion with ecdsa operations or independently for multiple hmac functions. two gpio pins can be independently operated under command control and include configurability supporting authenticated and nonauthenticated operation including an ecdsa-based crypto-robust mode to support secure- boot of a host processor. deepcover embedded security solutions cloak sensitive data under multiple layers of advanced security to provide the most secure key storage possible. to protect against device-level security attacks, invasive and noninvasive countermeasures are implemented including active die shield, encrypted storage of keys, and algorithmic methods. applications iot node crypto-protection accessory and peripheral secure authentication secure storage of cryptographic keys for a host controller secure boot or download of firmware and/or system parameters benefts and features ecc-256 compute engine ? fips 186 ecdsa p256 signature and verifcation ? ecdh key exchange with authentication prevents man-in-the-middle attacks ? ecdsa authenticated r/w of confgurable memory fips 180 sha-256 compute engine ? hmac sha-256 otp (one-time pad) encrypted r/w of configurable memory through ecdh established key two gpio pins with optional authentication control ? open-drain, 4ma/0.4v ? optional sha-256 or ecdsa authenticated on/off and state read ? optional ecdsa certifcate to set on/off after multiblock hash for secure boot rng with nist sp 800-90b compliant entropy source with function to read out optional chip generated pr/pu key pairs for ecc operations 17-bit one-time settable, nonvolatile decrement- only counter with authenticated read 8kbits of eeprom for user data, keys, and certificates unique and unalterable factory programmed 64-bit identification number (rom id) ? optional input data component to crypto and key operations i 2 c communication, 100khz and 400khz operating range: 3.3v 10%, -40c to +85c 6-pin tdfn package ordering information appears at end of data sheet. typical application circuit appears at end of data sheet. 19-8546; rev 0; 6/16 DS28C36 deepcover secure authenticator evaluation kit available abridged data sheet
voltage range on any pin relative to gnd .......... -0.5v to 4.0v maximum current into any pin ........................................... 20ma operating temperature range ........................... -40c to +85c junction temperature ...................................................... +150c storage temperature range ............................ -55c to +125c lead temperature (soldering, 10s) .................................. +300c soldering temperature (reflow) ...................................... +260c electrical characteristics (t a = -40c to +85c.) (note 1) parameter symbol conditions min typ max units supply voltage v cc 2.97 3.3 3.63 v active supply current i cc (note 2) 300 a standby supply current i ccs 250 a computation current i cmp refer to the full data sheet ma gpio output low piov ol 0.4 v input low piov il -0.3 v cc x 0.3v v input high piov ih v cc + 0.7v v cc + 0.3v v leakage current i l -10 10 a ecc engine generate ecdsa signature time t ges refer to the full data sheet ms generate ecc key pair t gkp ms verify ecdsa signature or compute ecdh time t ves ms sha-256 engine computation time (hmac or rng) t cmp refer to the full data sheet ms eeprom w/e endurance ncy t a = + 25c (notes 4, 5) 100k read memory time t rm 1 ms write memory time t wm refer to the full data sheet ms data retention t dr t a = + 85c (notes 6, 7) 10 years i 2 c scl and sda pins (note 8) low-level input voltage v il -0.3 0.15 v cc v high-level input voltage v ih 0.7 v cc v cc + 0.3v v hysteresis of schmitt trigger inputs v hys (note 9) 0.05 v cc v low-level output voltage at 4ma sink current v ol 0.4 v maxim integrated 2 absolute maximum ratings stresses beyond those listed under absolute maximum ratings may cause permanent damage to the device. these are stress ratings only, and functional operation of the device at these or any other conditions beyond those indicated in the operational sections of the specifications is not implied. exposure to ab solute maximum rating conditions for extended periods may affect device reliability. DS28C36 deepcover secure authenticator www.maximintegrated.com abridged data sheet
(t a = -40c to +85c.) (note 1) note 1: limits are 100% production tested at t a = +25c and/or t a = +85c. limits over the operating temperature range and relevant supply voltage range are guaranteed by design and characterization. typical values at +25 c. note 2: operating current continuously reading memory at 400khz with < 25ns rise and fall times on sda and scl. note 3: refer to the full data sheet. note 4: write-cycle endurance is tested in compliance with jesd47h. note 5: not 100% production tested; guaranteed by reliability qualification. note 6: data retention is rested in compliance with jesd47h. note 7: guaranteed by 100% production test at elevated temperature for a shorter time; equivalence of this production test to the data sheet limit at operating temperature range is established by reliability testing. note 8: all i 2 c timing values are referred to v ih(min) and v il(max) levels, except for t of , which is measured from v ih(min) to 0.3 x v cc . note 9: guaranteed by design and/or characterization only. not production tested. note 10: system requirement. note 11: the DS28C36 provides a hold time of at least 100ns for the sda signal (referred to the v ih(min) of the scl signal) to brigde the undefined regin of the falling edge of scl. the master can provide a hold time of 0ns when writing to the device. note 12: the maximum t hd:dat has only to be met if the device does not stretch the low period (t low ) of the scl signal. if the clock stretches the scl, the data must be valid by the setup time before it releases the clock (i 2 c-bus specification rev. 03, 19 june 2007). note 13: a fast-mode i 2 c-bus device can be used in a standard-mode i 2 c-bus system, but the requirement t su:dat 250ns must then be met. this is automatically the case if the device does not stretch the low period of the scl signal. if such a device does stretch the low period of the scl signal, it must output the next data bit to the sda line tr max + t su:dat = 1000 + 250 = 1250ns (according to the standard-mode i 2 c-bus specification) before the scl line is released. also, the acknowl - edge timing must meet this set-up time. (i 2 c-bus specification rev. 03, 19 june 2007) note 14: c b = total capacitance of one bus line in pf. the maximum bus capacitance allowable can vary from this value depending on the actual operating voltage and frequency of the application (i 2 c-bus specification rev. 03, 19 june 2007). note 15: i 2 c communication should not take place for max t oscwup time following a power-on reset. parameter symbol conditions min typ max units output fall time from v ih(min) to v il(max) with a bus capacitance from 10pf to 400pf t of (note 9) 30 ns pulse width of spikes that are suppressed by the input filter t sp (note 9) 50 ns input current with an input voltage between 0.1vccmax and 0.9vccmax ii -10 +10 a input capacitance ci (note 9) 10 pf scl clock frequency f scl (note 10) 0 400 khz hold time (repeated) start condition t hd:sta after this period, the frst clock pulse is generated 0.6 s low period of the scl clock t low 1.3 s high period of the scl clock t high 0.6 s setup time for a repeated start condition t su:sta 0.6 s data hold time t hd:dat (notes 9, 11, 12) 0.9 s data setup time t su:dat (note 13) 100 ns setup time for stop condition t su:sto 0.6 s bus free time between a stop and start condition t buf 1.3 s capacitive load for each bus line c b (notes 10, 14) 400 pf warm-up time t oscwup (note 15) 250 s maxim integrated 3 (ohfwulfdokdudfwhulvwlfvfrqwlqxhg DS28C36 deepcover secure authenticator www.maximintegrated.com abridged data sheet
pin name function 1 scl i 2 c clk 2 sda i 2 c data 3 gnd ground 4 piob general-purpose io 5 pioa general-purpose io 6 vcc supply voltage scl sda gnd 6 v cc 5 pioa 4 piob tdfn-ep (3mm x 3mm) top view 1 2 3 DS28C36 maxim integrated 4 pin confguration pin description DS28C36 deepcover secure authenticator www.maximintegrated.com abridged data sheet
+ denotes a lead(pb)-free/rohs-compliant package. t= tape and reel. * ep = exposed pad. part temp range pin-package DS28C36q+t -40c to +85c 6 tdfn-ep* (2.5k pcs) package type package code outline no. land pattern no. 6 tdfn-ep* t633+2 21-0137 90-0058 3.3v scl pioa piob sda v cc gnd c io io r p i 2 c port ds 28 c 36 ? 2016 maxim integrated products, inc. 5 typical application circuit ordering information package information for the latest package outline information and land patterns (footprints), go to www.maximintegrated.com/packages . note that a +, #, or - in the package code indicates rohs status only. package drawings may show a different suffix character, but the drawing pertains to the package regardless of rohs status. maxim integrated cannot assume responsibility for use of any circuitry other than circuitry entirely embodied in a maxim integrated product. no circuit patent licenses are implied. maxim integrated reserves the right to change the circuitry and specifcations without notice at any time. the parametric values (min and max limits) shown in the electrical characteristics table are guaranteed. other parametric values quoted in this data sheet are provided for guidance. maxim integrated and the maxim integrated logo are trademarks of maxim integrated products, inc. DS28C36 deepcover secure authenticator for pricing, delivery, and ordering information, please contact maxim direct at 1-888-629-4642, or visit maxim integrateds website at www.maximintegrated.com. abridged data sheet
|
