10 pcs : DS28S60Q+ - Security ICs / Authentication ICs Secure SPI Coprocessor with ChipDNA

DS28S60 DeepCover® Cryptographic Coprocessor Analog Devices DS28S60 DeepCover® Cryptographic Coprocessor easily integrates into embedded systems, enabling confidentiality, authentication, and integrity of information. With a fixed command set and no device-level firmware development required, the DS28S60 makes it fast and easy to implement full security for IoT devices. Communication with the device is performed using the industry-standard SPI slave interface at up to 20Mbps with a simple set of commands that provide a comprehensive security toolbox utilizing HW-based cryptographic blocks. As a coprocessor to an SPI- SPI-interfaced host controller, the command functionality includes ECDSA-P256 signature and verification, SHA-256-based digital signature, and AES-128 packet encryption/decryption. It also includes ECDHE key exchange for session key generation and access to high-quality random numbers. A NIST SP800-90B compliant true random number generator (TRNG) is integrated for on-chip cryptographic operations as well as providing random data and nonces to the host controller if required. Nonvolatile storage for secrets, certificates, public/private keys, and application-specific sensitive data is supported with 3.6KB of secured flash memory. The DS28S60 integrates Maxim’s patented ChipDNA™ feature, a physically unclonable function (PUF) to provide a cost-effective solution with the ultimate protection against security attacks. Using the random variation of semiconductor device characteristics that naturally occur during wafer fabrication, the ChipDNA circuit generates a unique output value that is repeatable over time, temperature, and operating voltage. Attempts to probe or observe ChipDNA operation modify the underlying circuit characteristics, preventing the discovery of the unique value used by the chip's cryptographic functions. ChipDNA output is utilized as key content to cryptographically secure all device-stored data and, optionally, under user control, key content for specific cryptographic operations.