DS28E25+ - DeepCover SHA-256 1-Wire Authenticator, 4Kb EEPROM | Analog Devices
料号： DS28E25 ✓ 量产中| 数量 | 单价 | 小计 |
|---|---|---|
| 1 | $2.76 | $2.76 |
| 10 | $2.55 | $25.50 |
| 100 | $2.2 | $220.00 |
| 500 | $1.95 | $975.00 |
| 1,000 | $1.75 | $1,750.00 |
| 3,000 | $1.55 | $4,650.00 |
DS28E25 概述
What is a secure authenticator? A secure authenticator is a specialized IC that performs cryptographic challenge-response authentication between an embedded host and a peripheral module, enabling anti-counterfeit verification, firmware integrity checks, and secure provisioning. Secure authenticators belong to the broader category of cryptographic co-processors, which in turn sit under hardware security ICs and, ultimately, the larger family of secure semiconductors. The DS28E25 specifically uses SHA-256 (a NIST-approved FIPS 180-4 hash), placing it at the high end of authentication strength.
Key features include hardware SHA-256 acceleration with secret protection, a unique and immutable 64-bit ROM ID for identification, 4 Kb (4096 bits) of user-programmable EEPROM with single-byte write capability, and built-in transient, ESD, and tamper-detection safeguards. The device supports 1-Wire overdrive speed up to 142 kbps, low standby current, and parasitic-power operation directly from the data line. The TO-92 package is well suited to space-constrained peripheral modules such as consumables, sensors, and cable assemblies.
Typical applications include medical consumable authentication (e.g., ensuring only qualified test strips or cartridges are used), printer cartridge and battery pack identification, secure firmware or calibration-data binding, and anti-counterfeit protection for industrial sensors, accessories, and connected peripherals. The 1-Wire interface minimizes wiring - often a single data line plus ground - which is ideal for field-installed modules.
When designing with the DS28E25, pay close attention to 1-Wire timing parameters and bus pull-up sizing; the device is specified for overdrive speed (max 142 kbps) only when the host controller enforces strict tW0L/tW0H windows. For systems that exceed the 3.63 V maximum, use a DS2480B or DS2481 1-Wire bridge to level-shift.
This page consolidates distributor pricing as of 2026-10-07, drop-in alternatives from the same TO-92 family and competitor parts, and practical design notes not found in the manufacturer datasheet alone.
直接替换替代料： DS28E25 ——相同封装，引脚兼容。需要 PCB 改动的不同封装料号已排除。
快速对比工具——选择替代料号进行并排对比：
DS28E25P+
✅ 直接替换📋 参考替代料（不在目录中）
DS28E25Q+T&R
✅ 直接替换📋 参考替代料（不在目录中）
DS28E25Q+T
✅ 直接替换📋 参考替代料（不在目录中）
DS28E25+T
✅ 直接替换📋 参考替代料（不在目录中）
DS28E25EVKIT
✅ 直接替换📋 参考替代料（不在目录中）
DS28E25
✅ 直接替换✓ 有现货
$1.55 / 个
查看数据手册 →DS28E25 规格参数
| 功能 | SHA-256 secure authenticator |
| Bus Interface | 1-Wire (standard and overdrive) |
| Operating Voltage Range | 2.97 V to 3.63 V |
| User Memory | 4 Kb (512 bytes) EEPROM |
| ROM ID | 64-bit unique serial number |
| Cryptographic Engine | SHA-256 (FIPS 180-4) MAC computation |
| Secret Storage | On-chip protected secret (not directly readable) |
| Max 1-Wire Speed | 142 kbps (overdrive mode) |
| 封装 | TO-92-2 (through-hole, 3 pins) |
| 工作温度 | -40 C to +85 C |
| ESD Protection | Yes (built-in transient/ESD protection) |
| 安装类型 | Through-hole |
| RoHS 状态 | Compliant |
| Lead-Free | Yes |
DS28E25 引脚配置
| 引脚 1 | GND — Ground reference for 1-Wire bus |
| 引脚 2 | DQ — 1-Wire data line (open-drain with internal pull-up); also parasitic power |
| 引脚 3 | NC — Not connected (per datasheet) |
典型应用
DS28E25 适用于 6 应用s: Medical Consumable Authentication, Printer Cartridge and Consumable Identification, Anti-Counterfeit Protection for Industrial Sensors, Battery Pack Authentication for Portable Equipment, Cable and Accessory Authentication, Secure Provisioning of IoT Peripherals.
Medical Consumable Authentication
The DS28E25 provides SHA-256 challenge-response authentication for disposable medical consumables such as diagnostic test strips, cartridges, and per-use sensors used in point-of-care instruments. The 4 Kb EEPROM stores lot codes, expiry dates, and calibration coefficients that participate in the SHA-256 MAC computation, preventing counterfeit or expired consumables from producing misleading results. According to Analog Devices medical reference designs, the 1-Wire single-contact interface minimizes connector cost and simplifies disposable-cassette wiring. The device's -40 C to +85 C industrial operating range supports refrigerator-to-body-temperature span, and the on-chip transient protection withstands the ESD events typical of routine handling by clinical staff.
推荐
Printer Cartridge and Consumable Identification
The DS28E25 authenticates printer ink/toner cartridges and 3D-printer filament spools, binding cartridge identity to host firmware through a hardware-rooted SHA-256 MAC. The 4 Kb user EEPROM stores fill levels, color profiles, and material lot data that the printer reads at each job start. Per Analog Devices printer accessory reference designs, the 1-Wire bus enables a two-wire (data + ground) cartridge cable, reducing moving-part wear compared with multi-pin connectors. The DS28E25's parasitic-power capability lets the cartridge operate without a separate power pin, while overdrive speed (142 kbps) keeps cartridge ID reads under 10 ms so the printer does not delay user-initiated jobs.
推荐
Anti-Counterfeit Protection for Industrial Sensors
The DS28E25 attaches to industrial sensor modules (pressure, flow, temperature, gas) to verify they are genuine OEM units before they are accepted by the host PLC or gateway. The 64-bit ROM ID provides traceability to the manufacturing batch, while the SHA-256 MAC prevents clones from spoofing calibration data. Per Analog Devices industrial authentication reference designs, the device's 2.97 V to 3.63 V supply range aligns with 3.3 V sensor rails and its on-chip ESD protection tolerates the field-installed environment. Engineers typically read the DS28E25 at PLC power-up; the 142 kbps overdrive speed keeps the start-up delay below typical PLC scan budgets.
推荐
Battery Pack Authentication for Portable Equipment
The DS28E25 is mounted inside Li-ion battery packs to authenticate the pack to the host device (power tool, e-bike, medical pump, two-way radio), preventing unsafe third-party batteries from being used. The 4 Kb EEPROM stores cycle count, chemistry tag, and manufacture date that participate in the SHA-256 MAC, allowing the host to refuse packs that fall outside its safety envelope. Per Analog Devices battery authentication documentation, the 1-Wire interface needs only one data pin on the battery's SMBus port, and the DS28E25's -40 C to +85 C range covers pack operating temperatures from cold storage to fast-charge thermal excursions.
推荐
Cable and Accessory Authentication
The DS28E25 embedded in cables (USB, HDMI, DisplayPort, charging, data acquisition) authenticates the cable to the host device so that high-speed or high-power cables can be verified before the host enables full-speed signaling or fast charging. The 4 Kb EEPROM holds cable revision, length-compensation data, and the SHA-256 secret-derivative MAC, which is computed live at each plug-in event. Per Analog Devices accessory authentication reference designs, the DS28E25's TO-92 footprint is small enough to embed in a USB-C connector shell, and its 1-Wire single-wire interface can share the cable shield return path. This is particularly relevant for cables sold as 'fast-charge' or '10 Gbps' where counterfeit underperformance is a known industry problem.
推荐
Secure Provisioning of IoT Peripherals
The DS28E25 secures the manufacturing provisioning step for IoT peripherals by binding Wi-Fi credentials, certificate fingerprints, and product keys to a hardware root that travels with the device through its entire service life. The 4 Kb user EEPROM holds the provisioned secrets under SHA-256 MAC protection, while the 64-bit ROM ID provides traceability for warranty and recall workflows. Per Analog Devices IoT security reference designs, this approach offloads secret storage from the IoT module's main MCU flash, where keys could be extracted over JTAG or by firmware imaging. The DS28E25's -40 C to +85 C industrial operating range supports outdoor and industrial IoT deployments.
推荐
推荐产品汇总
工程参考数据： DS28E25 ——对比、设计指导和合规信息。
选型指南
与替代料对比
| 参数 | 本产品 | DS28E25P+ | DS28E25Q+T&R | DS28E25Q+T | DS28E25+T | DS28E25EVKIT | DS28E25 (Maxim legacy) |
|---|---|---|---|---|---|---|---|
| Package | TO-92-2 (3-pin) | TO-92-2 (3-pin) - same | TO-92-2 (3-pin) - same | TO-92-2 (3-pin) - same | TO-92-2 (3-pin) - same | TO-92-2 (3-pin) sample units | TO-92-2 (3-pin) - same |
| Brand | Analog Devices | Analog Devices - same | Analog Devices - same | Analog Devices - same | Analog Devices - same | Analog Devices - same | Analog Devices (legacy Maxim) - same |
| Cryptographic Algorithm | SHA-256 | SHA-256 | SHA-256 | SHA-256 | SHA-256 | SHA-256 (sample parts) | SHA-256 |
| User EEPROM | 4 Kb | 4 Kb | 4 Kb | 4 Kb | 4 Kb | 4 Kb (sample parts) | 4 Kb |
| Bus Interface | 1-Wire (overdrive up to 142 kbps) | 1-Wire | 1-Wire | 1-Wire | 1-Wire | 1-Wire (sample parts) | 1-Wire |
| Operating Voltage | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V | 2.97 V to 3.63 V (sample parts) | 2.97 V to 3.63 V |
| ROM ID | 64-bit unique | 64-bit unique | 64-bit unique | 64-bit unique | 64-bit unique | 64-bit unique (sample parts) | 64-bit unique |
| Operating Temperature | -40 C to +85 C | -40 C to +85 C | -40 C to +85 C | -40 C to +85 C | -40 C to +85 C | -40 C to +85 C (sample parts) | -40 C to +85 C |
关键差异点
- Hardware-rooted SHA-256 with on-chip secret （对比 Software SHA-256 in MCU flash)
- 1-Wire single-contact interface （对比 DS28C16B (I2C SHA-256))
- Parasitic power capability （对比 DS28C16B (requires external VDD))
设计说明
The DS28E25 supports parasitic power from the 1-Wire DQ line, but EEPROM write operations require the host to supply a stable 2.97 V to 3.63 V on VDD. During long write cycles, the bus pull-up resistor must provide sufficient current (~1.5 mA typical, per Analog Devices datasheet); use a 4.7 kohm pull-up for standard 3.3 V systems and 2.2 kohm if the cable length exceeds 5 m. Adding a 0.1 uF decoupling capacitor adjacent to VDD is recommended when VDD is locally powered.
Do not place the DS28E25 in parallel with another 1-Wire slave on the same bus unless each device has been discovered through the standard 1-Wire ROM-search sequence; otherwise, simultaneous presence detection will return garbled ROM IDs. Also, do not exceed the 3.63 V absolute-maximum supply - even brief transients from an LDO dropout can lock out the SHA-256 engine. Always include a TVS diode (e.g., PESD3V3L4UG) on the DQ line for field-installed applications.
For TO-92 through-hole installations, route the DQ trace as short as possible and away from switching converter or relay switching edges. The 1-Wire bus is sensitive to capacitive loading above ~1 nF; for cables longer than 3 m, use a twisted pair with DQ on one conductor and GND on the other, and add a 100 ohm series resistor at the host end to damp reflections. Per Maxim application note 148, slew-rate-controlled 1-Wire drivers (such as DS2481) relax these layout constraints significantly.
合规信息
RoHS compliance per DigiKey listing. REACH, halogen-free, and conflict-mineral declarations were not present in the verified data; refer to Analog Devices product compliance documents for confirmation.
