Cryptographic coprocessor raises the security bar for IoT designs

Maxim Integrated Products, Inc. has released a new cryptographic coprocessor, featuring ChipDNA physically unclonable function (PUF) technology, that simplifies the process of protecting IoT designs from security threats. The DS28S60 secure coprocessor provides end-to-end encryption via a built-in key exchange capability, which uses an asymmetric key algorithm to exchange a symmetric key. The symmetric key can then be used to encrypt/decrypt data between two IoT nodes or a sensor node and the cloud, said the company.

ChipDNA PUF technology provides protection against invasive and reverse-engineering attacks. “The PUF circuit relies on the naturally occurring random analog characteristics of fundamental MOSFET devices to produce cryptographic keys,” explained Maxim Integrated. “The key is generated only when needed and is then deleted rather than stored on the chip. Any attempt to probe or observe the ChipDNA operation actually modifies the underlying circuit characteristics, which prevents discovery of the secret key.”

Maxim Integrated believes securing IoT designs requires a solution that prevents counterfeit components, and provides robust key management, secure boot, endpoint security, and feature control.

“While Maxim Integrated has always promoted highly secure solutions due to our background providing financial and government-grade security solutions, it wasn’t until the last few years with well-publicized attacks like Mirai and Stuxnet that we started to see a pull from our customers,” Kris Ardis, executive director for the Micros, Security and Software Business Unit at Maxim Integrated recently told EP. “We integrate proven crypto engines, secure bootload technology, and high quality random number generators into most of our micros for the industrial and medical markets.”

This latest DeepCover cryptographic coprocessor with hardware-based cryptography provides countermeasures that make it easier to protect against security attacks. In addition to the integrated ChipDNA PUF technology to encrypt keys, secrets, and all device stored data, the chip also includes a fixed-function ECC/SHA-256/AES cryptographic toolbox, end point security, feature control to enable/disable various factory-based options, and a high-speed 20 MHz SPI interface for fast throughput of security operations.

An evaluation kit, the DS28S60EVKIT, is available for the cryptographic coprocessor.