DS28E25G+T - 1-Wire SHA-256 Authenticator, 4Kb EEPROM | ADI
N.º da peça: DS28E25G+T ✓ Ativo| Qtd. | Preço unitário | Total |
|---|---|---|
| 1 | $2.21 | $2,21 |
| 10 | $1.95 | $19,50 |
| 100 | $1.78 | $178,00 |
| 500 | $1.71 | $855,00 |
| 1.000 | $1.67 | $1.670,00 |
DS28E25G+T Visão geral
What is a 1-Wire Secure Authenticator? It is a type of cryptographic security IC that protects embedded systems against counterfeiting, cloning, and unauthorized reflow. The category sits inside the broader hierarchy of secure authentication IC -> cryptographic processor -> secure element -> embedded security. ADI's DeepCover family layers physical tamper resistance on top of standard cryptography to shield secret keys from side-channel attacks. The DS28E25 belongs to the DeepCover embedded security family and is a member of the DS28E2x SHA-256 secure-authenticator family, differentiated by EEPROM size and feature set.
Key features include a hardware SHA-256 engine, a 256-bit secret key, a unique 64-bit lasered ROM ID per device, 4 Kbits (512 bytes) of user EEPROM organized as sixteen 32-byte pages, an additional 8-byte secure memory area, GPIO with selectable logic levels, and a decrement-only counter. Authentication runs in less than 5 ms at the standard 1-Wire speed of 15.4 kbps, enabling fast production-line verification. Operating temperature range is -40 °C to +85 °C, and quiescent current is approximately 1 µA in sleep mode.
Typical applications include medical sensor authentication to prevent counterfeit disposables, battery-pack authentication for power tools and e-bikes, printer cartridge identification, industrial control module authentication, and accessory/peripheral authentication for IoT endpoints. Designers use the DS28E25 to add a cryptographic "finger-print" to consumables and field-replaceable modules so that host firmware can refuse to operate with unauthorized replacements.
When designing with this device, follow ADI reference schematic DS28E25-Schematic and observe 1-Wire pull-up sizing on the data line: 1 kΩ to 5 kΩ typical at standard speed, dropping to a few hundred ohms for overdrive. Place the strong pull-up MOSFET near the device when using parasite power; an external 3.3 V supply simplifies designs above 25 °C ambient.
This page synthesizes distributor pricing, drop-in alternatives from the DS28E2x family, and practical design notes that go beyond the manufacturer datasheet to help hardware engineers shorten their BOM validation cycle.
Alternativas drop-in para DS28E25G+T — mesmo encapsulamento, compatível pino a pino. Peças de encapsulamento diferente que exigem retrabalho na PCB são excluídas.
Ferramenta de comparação rápida — selecione peças alternativas para comparação lado a lado:
DS28E22G+T
✅ Drop-In📋 Alternativa de referência (fora do catálogo)
DS28E26G+T
✅ Drop-In📋 Alternativa de referência (fora do catálogo)
DS28E50Q+T
✅ Drop-In📋 Alternativa de referência (fora do catálogo)
DS28C36G+T
✅ Drop-In📋 Alternativa de referência (fora do catálogo)
DS28E25G+T Classificações máximas e características elétricas
| Product Type | SHA-256 Secure Authenticator with User EEPROM |
| Family | DeepCover Embedded Security (DS28E2x) |
| Cryptographic Algorithm | FIPS 180-3 SHA-256 |
| User EEPROM Size | 4 Kbit (512 bytes / 16 pages of 32 bytes) |
| Unique ROM ID | 64-bit lasered, factory-programmed |
| Communication Interface | 1-Wire (standard 15.4 kbps, overdrive 142 kbps) |
| Operating Voltage | 2.97 V to 3.63 V |
| Faixa de temperatura de operação | -40 °C to +85 °C |
| GPIO | 1 (selectable logic level) |
| Decrement-Only Counter | Yes |
| Authentication Time (standard speed) | < 5 ms typical |
| Encapsulamento | TDFN-EP, 2-SFN, 6x6 mm |
| Package Marking Code | DSE25 (G suffix = tape & reel) |
| Tipo de montagem | Surface Mount |
| Lead-Free / RoHS | Yes (per manufacturer product page) |
| DeepCover Physical Security | Active shields and tamper detection (per datasheet Rev. 4) |
Configuração de pinos do DS28E25G+T
| Pino 1 | IO — 1-Wire data line (open-drain, requires external pull-up) |
| Pino 2 | GND — Ground reference |
| Pino 3 | GPIO — General-purpose IO, selectable logic level |
| Pino 4 | NC — No connection (per datasheet) |
| Pino 5 | NC — No connection (per datasheet) |
| Pino 6 | EP — Exposed pad - serves as thermal pad and VCC (must be soldered to PCB VCC plane) |
Aplicações típicas
DS28E25G+T é adequado para 6 aplicaçãos: Medical Sensor & Disposable Authentication, Battery Pack Authentication for Power Tools & E-bikes, Printer & Imaging Consumable Identification, Industrial Sensor & Field-Module Authentication, IoT Accessory & Peripheral Authentication, Automotive Aftermarket Part Authentication.
Medical Sensor & Disposable Authentication
The DS28E25G+T adds a cryptographic finger-print to single-use medical sensors (e.g., continuous-glucose-monitor electrodes, SpO₂ probes, and disposable blood-pressure cuffs) so that the host monitor refuses to operate with unauthorized or expired disposables. The FIPS 180-3 SHA-256 engine plus 256-bit secret key lets a host verify an accessory in under 5 ms at the 1-Wire standard speed, while the 4 Kbit user EEPROM stores calibration coefficients and lot/expiry metadata directly on the disposable. The 6x6 mm 2-SFN TDFN-EP package fits inside the tight confines of an electrode housing and the exposed pad keeps junction temperature low during sterilization. Designers can pair this with the ATECC608B-SSHDA-T on the host side if dual-verification is needed, but the DS28E25 is the lowest-cost authenticator choice when a single-wire interface is acceptable.
Recomendado
Battery Pack Authentication for Power Tools & E-bikes
In lithium-ion battery packs for cordless power tools, e-bikes, and handheld vacuums, the DS28E25G+T proves battery authenticity and tracks cycle counts. The 1-Wire interface needs only one extra pin on the battery-management connector, and the IC can run in parasite-power mode fed from the host's pull-up, eliminating an extra wire. The on-die SHA-256 engine resists counterfeiting and the 4 Kbit user EEPROM stores cycle count, chemistry tag, and pack serial number. The decrement-only counter protects tamper-evident usage logging. The 2-SFN TDFN-EP package is small enough to be co-located on the cell-strap PCB; an exposed pad to the GND plane provides both thermal relief and the mandatory clean ground reference for the 1-Wire transceiver.
Recomendado
Printer & Imaging Consumable Identification
Ink cartridges, toner bottles, drum units, and 3D-printer filament spools embed the DS28E25G+T so that the printer can verify a genuine consumable before starting a job. The 64-bit lasered ROM ID provides a globally unique identifier that the printer's firmware cross-references against an internal allow-list. The 4 Kbit user EEPROM stores remaining-ink counters, regional colour tables, and expiry data - and can be locked per-page to prevent roll-back attacks by counterfeiters. The 1-Wire interface runs on the existing cartridge-presence pin, so the printer needs only one GPIO plus a pull-up resistor to support authentication. Overdrive communication at 142 kbps keeps print-pipeline startup delay under a second, and the small 6x6 mm TDFN-EP footprint fits into any ink-tank carrier.
Recomendado
Industrial Sensor & Field-Module Authentication
In industrial process plants, the DS28E25G+T is soldered onto replacement sensor modules (pressure, flow, gas, vibration) so the head-end PLC refuses to operate with unauthorized modules. The DS28E25's DeepCover active shields protect the 256-bit secret key from side-channel probing, which is essential in the field where physical access cannot be fully controlled. The 4 Kbit EEPROM stores calibration coefficients, install dates, and last-service timestamps. The 1-Wire interface shares the existing fieldbus cable's spare conductor, simplifying retrofit installs. Industrial temperature tolerance (-40 °C to +85 °C) covers most outdoor cabinets. Designers commonly pair this with the ATSAMD21G18A-MU MCU running a 1-Wire master stack on a GPIO plus interrupt-on-edge for host verification.
Recomendado
IoT Accessory & Peripheral Authentication
Connected-home hubs, smart watches, hearing aids, and AR/VR controllers use the DS28E25G+T to prove that a paired accessory (a strap, a sensor pod, a charging cradle) is genuine. The 1-Wire interface is ideal when the accessory has only one or two conductors available - the device can share the data line with parasitic power, eliminating a separate power pin on the connector. The 4 Kbit user EEPROM stores pairing keys and usage telemetry. The 6x6 mm TDFN-EP package is small enough to integrate into a watch strap. Designers can use the DS28E25 in conjunction with the host MCU's secure element to provide two-factor authentication between the IoT cloud and the physical accessory. The GPIO pin can serve as a wake-up or tamper event line.
Recomendado
Automotive Aftermarket Part Authentication
Aftermarket head units, dashboard cameras, and OBD-II dongles integrate the DS28E25G+T to verify that the connected vehicle accessory is authorized. While the DS28E25 is not AEC-Q100 qualified, its -40 °C to +85 °C operating range covers most cabin and trunk installations, and the 2-SFN TDFN-EP package fits within the limited PCB area of a dashcam module. The 256-bit secret key plus SHA-256 challenge-response provides cryptographic proof of authenticity to thwart vehicle data theft. The 4 Kbit EEPROM holds VIN-linked pairing tokens. For under-hood AEC-Q100 requirements, ADI recommends the DS28E25-Q1 automotive-qualified variant; the G+T industrial part is the right choice when the application stays inside the cabin and a non-automotive grade is acceptable.
Recomendado
Resumo dos produtos recomendados
Dados de referência de engenharia para DS28E25G+T — comparação, orientação de projeto e informações de conformidade.
Guia de seleção
Comparação com alternativas
| Parâmetro | Este produto | DS28E22G+T | DS28E26G+T | DS28E50Q+T | DS28C36G+T |
|---|---|---|---|---|---|
| Package | TDFN-EP, 2-SFN, 6x6 mm | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same | TDFN-EP, 2-SFN, 6x6 mm - same |
| Brand | Analog Devices | Analog Devices | Analog Devices | Analog Devices | Analog Devices |
| Cryptographic Algorithm | SHA-256 (FIPS 180-3) symmetric | SHA-256 (FIPS 180-3) symmetric | SHA-256 (FIPS 180-3) symmetric | ECDSA P-256 asymmetric | ECDSA P-256 asymmetric + SHA-256 |
| Communication Interface | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | 1-Wire (15.4 / 142 kbps) | I²C (up to 400 kHz) |
| User EEPROM Size | 4 Kbit (512 bytes) | 2 Kbit (256 bytes) | 4 Kbit (512 bytes) | 3 Kbit (384 bytes) | 3 Kbit (384 bytes) |
| Secret Key Size | 256-bit | 256-bit | 256-bit | 256-bit (private key) | 256-bit (private key) |
| Operating Voltage | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V |
| Operating Temperature | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C | -40 °C to +85 °C |
| Pin Count | 6 | 6 | 6 | 6 | 6 |
Principais diferenciais
- Largest user EEPROM in the SHA-256 1-Wire family (vs DS28E22G+T)
- 1-Wire interface minimizes pin count on accessory connector (vs ATECC608B-SSHDA-T (Microchip))
- SHA-256 symmetric algorithm - simpler host code than ECDSA (vs DS28E50Q+T)
Notas de projeto
Keep the 1-Wire pull-up resistor within 25 mm of the DS28E25G+T IO pin (pin 1). Use a 4.7 kΩ pull-up to 3.3 V for standard speed (15.4 kbps); drop to 1 kΩ for overdrive (142 kbps). Route the IO line away from switching nodes and minimize stubs. The exposed pad (pin 6) must be soldered to the VCC plane and stitched with at least four thermal vias to a 1 oz inner copper pour for thermal relief during sterilization or continuous high-temperature operation.
The DS28E25G+T can operate in parasite-power mode (drawing current from the IO line through the internal diode to an internal storage cap) or from an external VCC. For applications above 25 °C ambient or where the host pulls the line low for more than 10 ms, supply VCC externally at 3.3 V to keep the SHA-256 engine's current budget stable. During strong-pullup (used to charge the internal cap), the host must switch to a low-impedance MOSFET pull-up capable of sourcing 10 mA.
The 1-Wire reset / presence pulse requires the host to pull the line low for at least 480 µs at standard speed (70 µs at overdrive) followed by a 15-60 µs release window. If the cable is longer than 30 cm, add a 33 pF load capacitor to ground at the device end to tame ring-back. Use a Schmitt-trigger input on the host side; many standard GPIOs need a software-deglitch routine to avoid false reset detection. Pull-up voltage must match VCC to within 0.3 V to avoid forward-biasing the internal ESD diode.
Do not leave the GPIO pin (pin 3) floating when unused - tie it through a 100 kΩ resistor to GND or VCC to avoid extra current draw. When writing to the user EEPROM, observe the 5 ms (standard) / 2 ms (overdrive) programming delay per page and verify with a read-back before issuing the next command. The 256-bit secret key is write-only after lock - any attempt to read returns all 1s; design your provisioning flow accordingly so you do not lose the key during manufacturing. Avoid issuing authentication commands faster than the host MCU can schedule the next reset pulse - the DS28E25 enforces a minimum inter-command delay of approximately 1 ms.
Informações de conformidade
RoHS compliant and lead-free per the Analog Devices product page. G suffix indicates lead-free terminal finish. Not AEC-Q100 qualified - choose the DS28E25-Q1 automotive variant for under-hood applications. REACH and conflict-minerals statements available from the manufacturer's Material Declaration documents.
