DS28C36Q+T

The DS28C36Q+T from Analog Devices is a DeepCover secure authenticator designed for robust security applications. It integrates hardware-accelerated cryptographic engines, including ECC-P256 for asymmetric key operations and SHA-256 for symmetric key functions. This device also features a FIPS/NIST true random number generator (RNG), 8Kb of secured EEPROM for secure key storage, and a decrement-only counter.

With two configurable GPIO pins, the DS28C36Q+T supports authenticated and non-authenticated operations, including an ECDSA-based crypto-robust mode suitable for secure boot of host processors. The ECC capabilities support FIPS 186 compliant ECDSA signature generation and verification, as well as ECDH key exchange to prevent man-in-the-middle attacks. The SHA-256 engine is compliant with FIPS 180 and can be used for multiple HMAC functions.

This authentication chip is housed in a compact 6-TDFN (3x3) package, suitable for surface mounting. Its applications include IoT node crypto-protection, accessory and peripheral secure authentication, and secure storage of cryptographic keys for host controllers.

The device offers advanced security features to cloak sensitive data and protect against device-level attacks, employing invasive and non-invasive countermeasures such as active die shields and encrypted storage of keys.