ABRIDGED DATA SHEET EVALUATION KIT AVAILABLE DS28E35 General Description DeepCover® embedded security solutions cloak sensitive data under multiple layers of advanced physical security to provide the most secure key storage possible. The DeepCover Secure Authenticator (DS28E35) provides a highly secure solution for a host controller to authenticate peripherals based on the industry standard (FIPS 186) public-key based Elliptic Curve Digital Signature Algorithm (ECDSA). The ECDSA engine computes keys and signatures using a pseudorandom curve over a prime field according to the “Standards for Efficient Cryptography (SEC)”. The private and public key can be computed by the device or installed by the user and optionally locked. Separate memory space is set aside to store and lock a public-key certificate as it is needed to verify authenticity. In addition to ECDSA-related memory, the device has 1024 bits of user memory that is organized as four pages of 256 bits. Page protection modes include write protection, read protection, and one-time-programmable (OTP) memory emulation modes. The DS28E35 also features a one-time settable, nonvolatile 17-bit decrement-on-command counter, which can be used to keep track of the lifetime of the object to which the DS28E35 is attached. Each device has its own guaranteed unique 64-bit ROM identification number (ROM ID) that is factory programmed into the chip. This unique ROM ID is used as a fundamental input parameter for cryptographic operations and also serves as an electronic serial number within the application. The DS28E35 communicates over the single-contact 1-Wire® bus at overdrive speed. The communication follows the 1-Wire protocol with the ROM ID acting as node address in the case of a multi-device 1-Wire network. Applications ● ● ● ● Authentication of Consumables Peripheral Authentication Medical Sensors Printer Cartridge Identification and Authentication Ordering Information appears at end of data sheet. For related parts and recommended products to use with this part, refer to www.maximintegrated.com/DS28E35.related. DeepCover and 1-Wire are registered trademarks of Maxim Integrated Products, Inc. 219-0028; Rev 2; 5/13 DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM Features ● ECDSA Engine for Public-Key Signature Using a Defined SEC Domain Parameter Set ● On-Chip Hardware Random Number Generator ● Private and Public Key Can Be Computed by the Device or Loaded from Outside with Optional Automatic Locking ● Separate User-Programmable and Lockable Memory Space to Store a Public-Key Certificate ● 17-Bit One-Time Settable, Nonvolatile DecrementOn-Command Counter ● SHA-256 Engine to Compute a Hash of EEPROM Page Data and Host Challenge for Subsequent ECDSA Signing ● 1024 Bit of User EEPROM Organized as Four Pages of 256 Bits ● Programmable and Irreversible User EEPROM Protection Modes Including Write Protection, Read Protection, and OTP/EPROM Emulation for Individual Memory Pages ● Unique Factory-Programmed 64-Bit Identification Number ● Single-Contact 1-Wire Interface Communicates with Host at Up to 76.9kbps ● Operating Range: 3.3V ±10%, -40ºC to +85ºC ● ±8kV HBM ESD Protection (typ) for IO Pin ● 8-Pin TDFN and 6-Pin TSOC Packages Typical Application Circuit 3.3V R1 10kΩ VCC PIOX µC PIOY GND Q1 BSS84 1-WIRE RPUP DS28E35 IO GND ABRIDGED DATA SHEET DS28E35 DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM Absolute Maximum Ratings IO Voltage Range to GND.....................................-0.5V to +4.0V IO Sink Current...................................................................20mA Operating Temperature Range.............................-40ºC to +85ºC Junction Temperature....................................................... +150ºC Storage Temperature Range..............................-55ºC to +125ºC Lead Temperature (soldering, 10s).................................. +300ºC Soldering Temperature (reflow)........................................ +260ºC Stresses beyond those listed under “Absolute Maximum Ratings” may cause permanent damage to the device. These are stress ratings only, and functional operation of the device at these or any other conditions beyond those indicated in the operational sections of the specifications is not implied. Exposure to absolute maximum rating conditions for extended periods may affect device reliability. Electrical Characteristics (TA = -40ºC to +85ºC.) (Note 1) PARAMETER SYMBOL CONDITIONS MIN TYP MAX UNITS IO PIN: GENERAL DATA 1-Wire Pullup Voltage VPUP (Note 2) 2.97 3.63 V 1-Wire Pullup Resistance RPUP VPUP = 3.3V ±10% (Note 3) 300 1500 Ω Input Capacitance CIO (Notes 4, 5) 1500 pF Input Load Current IL IO pin at VPUP 5 High-to-Low Switching Threshold VTL (Notes 5, 6, 7) 0.65 x VPUP Input Low Voltage VIL (Notes 2, 8) Low-to-High Switching Threshold VTH (Notes 5, 6, 9) 0.75 x VPUP V Switching Hysteresis VHY (Notes 5, 6, 10) 0.3 V Output Low Voltage VOL IOL = 4mA (Note 11) Recovery Time tREC RPUP = 1500Ω (Notes 2, 12) 5 µs Time Slot Duration tSLOT (Notes 2, 13) 13 µs 50 µA V 0.3 0.4 V V IO PIN: 1-Wire RESET, PRESENCE DETECT CYCLE Reset Low Time tRSTL (Note 2) 48 80 µs Reset High Time tRSTH (Note 14) 48 Presence Detect Sample Time tMSP (Notes 2, 15) 8 10 µs Write-Zero Low Time tW0L (Notes 2, 16) 8 16 µs Write-One Low Time tW1L (Notes 2, 16) 1 2 µs tRL (Notes 2, 17) 1 2-d µs tMSR (Notes 2, 17) tRL + d 2 µs 1 mA µs IO PIN: 1-Wire WRITE IO PIN: 1-Wire READ Read Low Time Read Sample Time EEPROM Programming Current IPROG VPUP = 3.63V (Notes 5, 18) Programming Time Unit tPROG Refer to the full data sheet. Write/Erase Cycling Endurance NCY TA = +85ºC (Notes 20, 21) Data Retention tDR TA = +85ºC (Notes 22, 23, 24) www.maximintegrated.com ms 100k — 10 years Maxim Integrated │ 2 ABRIDGED DATA SHEET DS28E35 DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM Electrical Characteristics (continued) (TA = -40ºC to +85ºC.) (Note 1) PARAMETER SYMBOL CONDITIONS MIN TYP MAX UNITS ECDSA ENGINE Computation Current IECE Key Pair Computation Time tGKP Signature Computation Time tGPS mA Refer to the full data sheet. ms ms Note 1: Limits are 100% production tested at TA = +25ºC and TA = +85ºC. Limits over the operating temperature range and relevant supply voltage range are guaranteed by design and characterization. Typical values are at TA = +25ºC. Note 2: System requirement. Note 3: Maximum allowable pullup resistance is a function of the number of 1-Wire devices in the system and 1-Wire recovery times. The specified value here applies to systems with only one device and with the minimum 1-Wire recovery times. Note 4: Typical value represents the internal parasite capacitance when VPUP is first applied. Once the parasite capacitance is charged, it does not affect normal communication. Note 5: Guaranteed by design and/or characterization only; not production tested. Note 6: VTL, VTH, and VHY are a function of the internal supply voltage, which is a function of VPUP, RPUP, 1-Wire timing, and capacitive loading on IO. Lower VPUP, higher RPUP, shorter tREC, and heavier capacitive loading all lead to lower values of VTL, VTH, and VHY. Note 7: Voltage below which, during a falling edge on IO, a logic-zero is detected. Note 8: The voltage on IO must be less than or equal to VILMAX at all times the master is driving IO to a logic-zero level. Note 9: Voltage above which, during a rising edge on IO, a logic-one is detected. Note 10: After VTH is crossed during a rising edge on IO, the voltage on IO must drop by at least VHY to be detected as logic-zero. Note 11: The I-V characteristic is linear for voltages less than 1V. Note 12: Applies to a single device attached to a 1-Wire line. 100% production tested at TA = +85ºC, +25ºC, and -40ºC. Note 13: Defines maximum possible bit rate. Equal to 1/(tW0LMIN + tRECMIN). Note 14: An additional reset or communication sequence cannot begin until the reset high time has expired. Note 15: Interval after tRSTL during which a bus master can read a logic-zero on IO if there is a DS28E35 present. The power-up presence detect pulse could be outside this interval, but is complete within 2ms after power-up. Note 16: ε in Figure 11 represents the time required for the pullup circuitry to pull the voltage on IO up from VIL to VTH. The actual maximum duration for the master to pull the line low is tW1LMAX + tF - ε and tW0LMAX + tF - ε, respectively. Note 17: δ in Figure 11 represents the time required for the pullup circuitry to pull the voltage on IO up from VIL to the input-high threshold of the bus master. The actual maximum duration for the master to pull the line low is tRLMAX + tF. Note 18: Current drawn from IO during the EEPROM programming interval. The pullup circuit on IO during the programming interval should be such that the voltage at IO is greater than or equal to 2.5V. Note 19: Refer to the full data sheet. Note Note Note Note 20: 21: 22: 23: Write-cycle endurance is tested in compliance with JESD47G. Not 100% production tested; guaranteed by reliability monitor sampling. Data retention is tested in compliance with JESD47G. Guaranteed by 100% production test at elevated temperature for a shorter time; equivalence of this production test to the data sheet limit at operating temperature range is established by reliability testing. Note 24: EEPROM writes can become nonfunctional after the data-retention time is exceeded. Long-term storage at elevated temperatures is not recommended. Note 25: Refer to the full data sheet. Note 26: Refer to the full data sheet. Note 27: Refer to the full data sheet. www.maximintegrated.com Maxim Integrated │ 3 ABRIDGED DATA SHEET DS28E35 DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM Pin Configuration TOP VIEW N.C. N.C. N.C. N.C. + GND 1 IO 2 N.C. 3 8 DS28E35 6 N.C. 7 6 5 DS28E35 5 N.C. 4 N.C. 28E35 ymrrF TSOC EP + 1 IO PACKAGE SIZES NOT DRAWN TO SCALE 2 3 4 GND N.C. N.C. TDFN (2mm x 3mm) Pin Description PIN NAME TSOC TDFN-EP 1 2 GND 2 1 IO 3–6 3–8 N.C. — EP EP www.maximintegrated.com FUNCTION Ground Reference 1-Wire Bus Interface. Open-drain signal that requires an external pullup resistor. Not Connected Exposed Pad. Solder evenly to the board’s ground plane for proper operation. Refer to Application Note 3273: Exposed Pads: A Brief Introduction for additional information. Maxim Integrated │ 4 ABRIDGED DATA SHEET DS28E35 DeepCover Secure Authenticator with 1-Wire ECDSA and 1Kb User EEPROM Ordering Information Package Information PART TEMP RANGE PIN-PACKAGE DS28E35Q+T -40ºC to +85ºC 8 TDFN-EP* (2.5k pcs) DS28E35P+ -40ºC to +85ºC 6 TSOC DS28E35P+T -40ºC to +85ºC 6 TSOC (4k pcs) +Denotes lead(Pb)-free/RoHS-compliant package. T = Tape and reel. *EP = Exposed pad. For the latest package outline information and land patterns (footprints), go to www.maximintegrated.com/packages. Note that a “+”, “#”, or “-” in the package code indicates RoHS status only. Package drawings may show a different suffix character, but the drawing pertains to the package regardless of RoHS status. PACKAGE TYPE PACKAGE CODE OUTLINE NO. LAND PATTERN NO. 6 TSOC D6+1 21-0382 90-0321 8 TDFN-EP T823+1 21-0174 90-0091 Note to readers: This document is an abridged version of the full data sheet. Additional device information is available only in the full version of the data sheet. To request the full data sheet, go to www.maximintegrated.com/DS28E35 and click on Request Full Data Sheet. www.maximintegrated.com Maxim Integrated │ 40