Maxim公司的DS28E83是耐輻射安全認證器,從集成的非對稱(ECC-P256)和對稱(SHA-256安全函數推算核心密碼工具,除了由硬件實現加密引擎的安全服務外,器件集成了FIPS兼容的真隨機號碼發生器(TRNG),10Kb安全OTP,一個可配置GPIO和一個唯一64位ROM身份碼(ROM ID),醫用滅菌抗性抗輻射高達75kGy (kiloGray),同時可使用戶可編程制造或校準數據.1-Wire IO引腳±8kV HBM ESD保護,工作電壓3.3V ±10%, 工作溫度0℃ 到 +50℃ ,主要用在醫療安全認證,醫療工具/附件身份和校準,附件和外設安全認證,主控制器的密鑰安全存儲,固件和/或系統參數的安全引導或下載.本文介紹了DS28E83主要優勢和特性,簡化框圖,典型應用電路圖以及評估板DS28E83 EVK主要特性和電路圖與材料清單.

The DS28E83 is a radiation-resistant secure authentica­tor that provides a core set of cryptographic tools derived from integrated asymmetric (ECC-P256) and symmetric (SHA-256) security functions. In addition to the security services provided by the hardware implemented crypto engines, the device integrates a FIPS-compatible true random number generator (TRNG), 10Kb of secured OTP, one configurable GPIO, and a unique 64-bit ROM identification number (ROM ID).

The ECC public/private key capabilities operate from the NIST defined P-256 curve and include FIPS 186-compliant ECDSA signature generation and verification to support a bidirectional asymmetric key authentication model. The SHA-256 secret key capabilities are compliant with FIPS 180 and are flexibly used either in conjunction with ECDSA operations or independently for multiple HMAC functions.

The GPIO pin can be operated under command control and include configurability supporting authenticated and nonau­thenticated operation, including an ECDSA-based crypto-robust mode to support secure boot of a host processor.

DeepCover® embedded security solutions cloak sensitive data under multiple layers of advanced security to provide the most secure key storage possible. To protect against device-level security attacks, invasive and noninvasive countermeasures are implemented including active die shield, encrypted storage of keys, and algorithmic methods.

DS28E83主要優勢和特性:

High Radiation Resistance Allows User-Programmable Manufacturing or Calibration Data Before Medical SterilizationResistant Up to 75kGy (kiloGray) of Radiation
One Time Programmable (OTP) 10kb of User Data, Keys, and Certificates
ECC-P256 Compute EngineFIPS 186 ECDSA P256 Signature and Verification
ECDH Key Exchange for Session Key Establishment
ECDSA Authenticated R/W of Configurable Memory
SHA-256 Compute EngineFIPS 180 MAC for Secure Download/Boot
FIPS 198 HMAC for Bidirectional Authentication and Optional GPIO Control
SHA-256 OTP (One-Time Pad) Encrypted R/W of Configurable Memory Through ECDH Established Key
One GPIO Pin with Optional Authentication ControlOpen-Drain, 4mA/0.4V
Optional SHA-256 or ECDSA Authenticated On/Off and State Read
Optional ECDSA Certificate to Set On/Off After Multiblock Hash for Secure Download
TRNG with NIST SP 800-90B Compliant Entropy Source with Function to Read Out
Optional Chip Generated Pr/Pu Key Pairs for ECC Operations or Secrets for SHA256 Functions
Unique and Unalterable Factory Programmed 64-Bit Identification Number (ROM ID)
Optional Input Data Component to Crypto and Key Operations
Advanced 1-Wire Protocol Minimizes Interface to Just Single Contact
Operating Range: 3.3V ±10%, 0℃ to +50℃
±8kV HBM ESD Protection of 1-Wire IO Pin
6-Pin, 3mm x 3mm TDFN

DS28E83應用:

Medical Consumables Secure Authentication
Medical Tools/Accessories Identification and Calibration
Accessory and Peripheral Secure Authentication
Secure Storage of Cryptographic Keys for Host Controllers
Secure Boot or Download of Firmware and/or System Parameters

圖1.DS28E83簡化框圖

圖2.DS28E83典型應用電路圖

評估板DS28E83 EVK

The DS28E83 evaluation system (EV system) provides the hardware and software necessary to exercise the features of the DS28E83. The EV system consists of five DS28E83/ DS2476 devices in a 6-pin TDFN package, a DS9121AQ+ evaluation TDFN socket board, and a DS9481P-300# USB-to-I2C/1-Wire® adapter. The evaluation software runs under Windows® 10, Windows 8, and Windows 7 operat­ing systems, both 64-bit and 32-bit versions. It provides a handy user interface to exercise the features of the DS28E83 and DS2476.

評估板DS28E83 EVK主要特性:

Demonstrates the Features of the DS28E83 DeepCover® Radiation Resistant 1-Wire Authenticator
Demonstrates the Features of the DS2476 DeepCover Secure Coprocessor
1-Wire/I2C Communication Is Logged to Aid Firmware Designers Understanding of DS28E83 and DS2476
1-Wire/I2C USB Adapter Creates a Virtual COM Port on Any PC
Fully Compliant with USB Specification v2.0
Software Runs on Windows 10, Windows 8, and Windows 7 for Both 64-Bit and 32-Bit Versions
3.3V ±3% 1-Wire Operating Voltage
Convenient On-Board Test Points, TDFN Socket
Evaluation Software Available by Request
評估板DS28E83 EVK包括:

圖3.DS28E83 EV評估系統外形圖

圖4. DS28E83 EV評估系統電路圖
DS28E83 EV評估系統材料清單:

詳情請見:
https://datasheets.maximintegrated.com/en/ds/DS28E83.pdf
和https://datasheets.maximintegrated.com/en/ds/DS28E83EVKIT.pdf
DS28E83.pdf