DS28E25G+T - 1-Wire SHA-256 Authenticator, 4Kb EEPROM | ADI
部品番号: DS28E25G+T ✓ 生産中| 数量 | 単価 | 小計 |
|---|---|---|
| 1 | $2.21 | $2.21 |
| 10 | $1.95 | $19.50 |
| 100 | $1.78 | $178.00 |
| 500 | $1.71 | $855.00 |
| 1,000 | $1.67 | $1,670.00 |
DS28E25G+T 概要
What is a 1-Wire Secure Authenticator? It is a type of cryptographic security IC that protects embedded systems against counterfeiting, cloning, and unauthorized reflow. The category sits inside the broader hierarchy of secure authentication IC -> cryptographic processor -> secure element -> embedded security. ADI's DeepCover family layers physical tamper resistance on top of standard cryptography to shield secret keys from side-channel attacks. The DS28E25 belongs to the DeepCover embedded security family and is a member of the DS28E2x SHA-256 secure-authenticator family, differentiated by EEPROM size and feature set.
Key features include a hardware SHA-256 engine, a 256-bit secret key, a unique 64-bit lasered ROM ID per device, 4 Kbits (512 bytes) of user EEPROM organized as sixteen 32-byte pages, an additional 8-byte secure memory area, GPIO with selectable logic levels, and a decrement-only counter. Authentication runs in less than 5 ms at the standard 1-Wire speed of 15.4 kbps, enabling fast production-line verification. Operating temperature range is -40 °C to +85 °C, and quiescent current is approximately 1 µA in sleep mode.
Typical applications include medical sensor authentication to prevent counterfeit disposables, battery-pack authentication for power tools and e-bikes, printer cartridge identification, industrial control module authentication, and accessory/peripheral authentication for IoT endpoints. Designers use the DS28E25 to add a cryptographic "finger-print" to consumables and field-replaceable modules so that host firmware can refuse to operate with unauthorized replacements.
When designing with this device, follow ADI reference schematic DS28E25-Schematic and observe 1-Wire pull-up sizing on the data line: 1 kΩ to 5 kΩ typical at standard speed, dropping to a few hundred ohms for overdrive. Place the strong pull-up MOSFET near the device when using parasite power; an external 3.3 V supply simplifies designs above 25 °C ambient.
This page synthesizes distributor pricing, drop-in alternatives from the DS28E2x family, and practical design notes that go beyond the manufacturer datasheet to help hardware engineers shorten their BOM validation cycle.
ドロップイン代替品: DS28E25G+T — 同一パッケージでピン互換。PCBの作り直しが必要な異なるパッケージの部品は除外されています。
クイック比較ツール — 並列比較する代替部品を選択:
DS28E22G+T
✅ ドロップイン📋 参考代替品（カタログ未掲載）
DS28E26G+T
✅ ドロップイン📋 参考代替品（カタログ未掲載）
DS28E50Q+T
✅ ドロップイン📋 参考代替品（カタログ未掲載）
DS28C36G+T
✅ ドロップイン📋 参考代替品（カタログ未掲載）
DS28E25G+T 最大定格＆電気的特性
| Product Type | SHA-256 Secure Authenticator with User EEPROM |
| Family | DeepCover Embedded Security (DS28E2x) |
| Cryptographic Algorithm | FIPS 180-3 SHA-256 |
| User EEPROM Size | 4 Kbit (512 bytes / 16 pages of 32 bytes) |
| Unique ROM ID | 64-bit lasered, factory-programmed |
| Communication Interface | 1-Wire (standard 15.4 kbps, overdrive 142 kbps) |
| Operating Voltage | 2.97 V to 3.63 V |
| 動作温度範囲 | -40 °C to +85 °C |
| GPIO | 1 (selectable logic level) |
| Decrement-Only Counter | Yes |
| Authentication Time (standard speed) | < 5 ms typical |
| パッケージ | TDFN-EP, 2-SFN, 6x6 mm |
| Package Marking Code | DSE25 (G suffix = tape & reel) |
| 実装タイプ | Surface Mount |
| Lead-Free / RoHS | Yes (per manufacturer product page) |
| DeepCover Physical Security | Active shields and tamper detection (per datasheet Rev. 4) |
DS28E25G+T ピン構成
| ピン 1 | IO — 1-Wire data line (open-drain, requires external pull-up) |
| ピン 2 | GND — Ground reference |
| ピン 3 | GPIO — General-purpose IO, selectable logic level |
| ピン 4 | NC — No connection (per datasheet) |
| ピン 5 | NC — No connection (per datasheet) |
| ピン 6 | EP — Exposed pad - serves as thermal pad and VCC (must be soldered to PCB VCC plane) |
主な用途
DS28E25G+T の用途: 6 件s: Medical Sensor & Disposable Authentication, Battery Pack Authentication for Power Tools & E-bikes, Printer & Imaging Consumable Identification, Industrial Sensor & Field-Module Authentication, IoT Accessory & Peripheral Authentication, Automotive Aftermarket Part Authentication.
Medical Sensor & Disposable Authentication
The DS28E25G+T adds a cryptographic finger-print to single-use medical sensors (e.g., continuous-glucose-monitor electrodes, SpO₂ probes, and disposable blood-pressure cuffs) so that the host monitor refuses to operate with unauthorized or expired disposables. The FIPS 180-3 SHA-256 engine plus 256-bit secret key lets a host verify an accessory in under 5 ms at the 1-Wire standard speed, while the 4 Kbit user EEPROM stores calibration coefficients and lot/expiry metadata directly on the disposable. The 6x6 mm 2-SFN TDFN-EP package fits inside the tight confines of an electrode housing and the exposed pad keeps junction temperature low during sterilization. Designers can pair this with the ATECC608B-SSHDA-T on the host side if dual-verification is needed, but the DS28E25 is the lowest-cost authenticator choice when a single-wire interface is acceptable.
おすすめ
Battery Pack Authentication for Power Tools & E-bikes
In lithium-ion battery packs for cordless power tools, e-bikes, and handheld vacuums, the DS28E25G+T proves battery authenticity and tracks cycle counts. The 1-Wire interface needs only one extra pin on the battery-management connector, and the IC can run in parasite-power mode fed from the host's pull-up, eliminating an extra wire. The on-die SHA-256 engine resists counterfeiting and the 4 Kbit user EEPROM stores cycle count, chemistry tag, and pack serial number. The decrement-only counter protects tamper-evident usage logging. The 2-SFN TDFN-EP package is small enough to be co-located on the cell-strap PCB; an exposed pad to the GND plane provides both thermal relief and the mandatory clean ground reference for the 1-Wire transceiver.
おすすめ
Printer & Imaging Consumable Identification
Ink cartridges, toner bottles, drum units, and 3D-printer filament spools embed the DS28E25G+T so that the printer can verify a genuine consumable before starting a job. The 64-bit lasered ROM ID provides a globally unique identifier that the printer's firmware cross-references against an internal allow-list. The 4 Kbit user EEPROM stores remaining-ink counters, regional colour tables, and expiry data - and can be locked per-page to prevent roll-back attacks by counterfeiters. The 1-Wire interface runs on the existing cartridge-presence pin, so the printer needs only one GPIO plus a pull-up resistor to support authentication. Overdrive communication at 142 kbps keeps print-pipeline startup delay under a second, and the small 6x6 mm TDFN-EP footprint fits into any ink-tank carrier.
おすすめ
Industrial Sensor & Field-Module Authentication
In industrial process plants, the DS28E25G+T is soldered onto replacement sensor modules (pressure, flow, gas, vibration) so the head-end PLC refuses to operate with unauthorized modules. The DS28E25's DeepCover active shields protect the 256-bit secret key from side-channel probing, which is essential in the field where physical access cannot be fully controlled. The 4 Kbit EEPROM stores calibration coefficients, install dates, and last-service timestamps. The 1-Wire interface shares the existing fieldbus cable's spare conductor, simplifying retrofit installs. Industrial temperature tolerance (-40 °C to +85 °C) covers most outdoor cabinets. Designers commonly pair this with the ATSAMD21G18A-MU MCU running a 1-Wire master stack on a GPIO plus interrupt-on-edge for host verification.
おすすめ
IoT Accessory & Peripheral Authentication
Connected-home hubs, smart watches, hearing aids, and AR/VR controllers use the DS28E25G+T to prove that a paired accessory (a strap, a sensor pod, a charging cradle) is genuine. The 1-Wire interface is ideal when the accessory has only one or two conductors available - the device can share the data line with parasitic power, eliminating a separate power pin on the connector. The 4 Kbit user EEPROM stores pairing keys and usage telemetry. The 6x6 mm TDFN-EP package is small enough to integrate into a watch strap. Designers can use the DS28E25 in conjunction with the host MCU's secure element to provide two-factor authentication between the IoT cloud and the physical accessory. The GPIO pin can serve as a wake-up or tamper event line.
おすすめ
Automotive Aftermarket Part Authentication
Aftermarket head units, dashboard cameras, and OBD-II dongles integrate the DS28E25G+T to verify that the connected vehicle accessory is authorized. While the DS28E25 is not AEC-Q100 qualified, its -40 °C to +85 °C operating range covers most cabin and trunk installations, and the 2-SFN TDFN-EP package fits within the limited PCB area of a dashcam module. The 256-bit secret key plus SHA-256 challenge-response provides cryptographic proof of authenticity to thwart vehicle data theft. The 4 Kbit EEPROM holds VIN-linked pairing tokens. For under-hood AEC-Q100 requirements, ADI recommends the DS28E25-Q1 automotive-qualified variant; the G+T industrial part is the right choice when the application stays inside the cabin and a non-automotive grade is acceptable.
おすすめ
おすすめ製品の概要
エンジニアリング参考データ: DS28E25G+T — 比較、設計ガイダンス、コンプライアンス情報。
選定ガイド
代替品との比較
| パラメータ | この製品 | DS28E22G+T | DS28E26G+T | DS28E50Q+T | DS28C36G+T |
|---|---|---|---|---|---|
| Package | TDFN-EP, 2-SFN, 6x6 mm | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same |
| Brand | Analog Devices | Analog Devices | Analog Devices | Analog Devices | Analog Devices |
| Cryptographic Algorithm | SHA-256 (FIPS 180-3) symmetric | SHA-256 (FIPS 180-3) symmetric | SHA-256 (FIPS 180-3) symmetric | ECDSA P-256 asymmetric | ECDSA P-256 asymmetric + SHA-256 |
| Communication Interface | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | I²C (up to 400 kHz) |
| User EEPROM Size | 4 Kbit (512 bytes) | 2 Kbit (256 bytes) | 4 Kbit (512 bytes) | 3 Kbit (384 bytes) | 3 Kbit (384 bytes) |
| Secret Key Size | 256-bit | 256-bit | 256-bit | 256-bit (private key) | 256-bit (private key) |
| Operating Voltage | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V |
| Operating Temperature | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C |
| Pin Count | 6 | 6 | 6 | 6 | 6 |
主な差別化要因
- Largest user EEPROM in the SHA-256 1-Wire family （vs DS28E22G+T)
- 1-Wire interface minimizes pin count on accessory connector （vs ATECC608B-SSHDA-T (Microchip))
- SHA-256 symmetric algorithm - simpler host code than ECDSA （vs DS28E50Q+T)
設計ノート
Keep the 1-Wire pull-up resistor within 25 mm of the DS28E25G+T IO pin (pin 1). Use a 4.7 kΩ pull-up to 3.3 V for standard speed (15.4 kbps); drop to 1 kΩ for overdrive (142 kbps). Route the IO line away from switching nodes and minimize stubs. The exposed pad (pin 6) must be soldered to the VCC plane and stitched with at least four thermal vias to a 1 oz inner copper pour for thermal relief during sterilization or continuous high-temperature operation.
The DS28E25G+T can operate in parasite-power mode (drawing current from the IO line through the internal diode to an internal storage cap) or from an external VCC. For applications above 25 °C ambient or where the host pulls the line low for more than 10 ms, supply VCC externally at 3.3 V to keep the SHA-256 engine's current budget stable. During strong-pullup (used to charge the internal cap), the host must switch to a low-impedance MOSFET pull-up capable of sourcing 10 mA.
The 1-Wire reset / presence pulse requires the host to pull the line low for at least 480 µs at standard speed (70 µs at overdrive) followed by a 15-60 µs release window. If the cable is longer than 30 cm, add a 33 pF load capacitor to ground at the device end to tame ring-back. Use a Schmitt-trigger input on the host side; many standard GPIOs need a software-deglitch routine to avoid false reset detection. Pull-up voltage must match VCC to within 0.3 V to avoid forward-biasing the internal ESD diode.
Do not leave the GPIO pin (pin 3) floating when unused - tie it through a 100 kΩ resistor to GND or VCC to avoid extra current draw. When writing to the user EEPROM, observe the 5 ms (standard) / 2 ms (overdrive) programming delay per page and verify with a read-back before issuing the next command. The 256-bit secret key is write-only after lock - any attempt to read returns all 1s; design your provisioning flow accordingly so you do not lose the key during manufacturing. Avoid issuing authentication commands faster than the host MCU can schedule the next reset pulse - the DS28E25 enforces a minimum inter-command delay of approximately 1 ms.
コンプライアンス情報
RoHS compliant and lead-free per the Analog Devices product page. G suffix indicates lead-free terminal finish. Not AEC-Q100 qualified - choose the DS28E25-Q1 automotive variant for under-hood applications. REACH and conflict-minerals statements available from the manufacturer's Material Declaration documents.
