general description deepcover? embedded security solutions cloak sensitive data under multiple layers of advanced physical security to provide the most secure key storage possible. the deepcover security manager (MAX36025) is a highly integrated device intended to address the security requirements of high-end cryptographic systems and data-at-rest storage applications. the device employs a tamper-reactive dual aes cryptographic engine archi - tecture that facilitates the cost effective implementation of multiple cipher channels across compartmentalized system nodes and storage elements. two spi interfaces and one generic serial flash interface are provided for secure, flexible communication to exter - nal system nodes. the MAX36025 can be programmed to route any of these interface inputs through one, both, or neither of the dual aes engines, and also to any of these interface outputs. device programming and configuration are performed through an i 2 c-compatible interface. the i 2 c interface can be secured using an integrated authentication proto - col for an additional layer of security regarding validation of ancillary system elements as well as fof (friend or foe) decisions. additionally, the MAX36025 can encrypt i 2 c communications using a configurable aes key. the MAX36025 includes on-chip nonimprinting memory that incorporates a high-speed, direct-wired clearing function. the memory is constantly complemented in the background to prevent memory imprinting of data. the MAX36025 architecture allows the user to clear selec - tive banks of the memory based upon specified tamper events. in the event of a qualified tamper, the desired bank(s) of memory are rapidly cleared and a negative bias can be applied to erase external memory. the MAX36025 includes a seconds counter, watchdog timer, cpu supervisor, nonvolatile (nv) sram control - ler, and on-chip temperature sensor. in the event of a primary power failure, an external battery source is auto - matically switched in to keep the memory, time, and tam - per-detection circuitry active. the MAX36025 provides low-leakage, tamper-detection inputs for interfacing to external sensors, interlocks, and antitamper meshes. the MAX36025 also invokes a tamper event on absolute temperature, if the temperature exceeds programmed limits, or if the crystal oscillator frequency falls outside of a specified window. the tamper event is latched and time-stamped for fault recovery purposes. the hardwired aes engine implementation and extensive suite of tamper detection and response mechanisms make the MAX36025 well suited across a wide range of applica - tions where consistent security policies must be maintained. features s cryptographic ? triple mode encryption: aes-ecb, aes-ctr, aes-cbc ? dual encryption cores to allow dual key cipher translation and routing ? on-chip secure key storage ? pipelined dual asynchronous bidirectional spi data ports s storage ? 1k x 8 on-chip nonimprinting memory with high-speed tamper-reactive erase ? external serial flash interface ? tamper-reactive nv sram controller s authentication ? on-chip pseudorandom number generator with internal seed ? i 2 c control interface requires authentication through aes encryption s tamper detection and response ? on-chip programmable temperature sensing with proprietary rate-of-change (roc) detector ? two general-purpose tamper-detect logic inputs ? four uncommitted tamper-detect comparator inputs ? four window comparators with on-chip reference voltage ? latching and timestamping of tamper events ? crystal oscillator tamper monitoring s differential power analysis and tempest countermeasures ? on-chip spread-spectrum clock source for the aes cores and the external memory interface ? power controller ensures constant current during cryptographic operations s underwriters laboratories (ul) recognized applications 119-0018; rev 1; 5/13 ordering information appears at end of data sheet. secure communications software-defined radios cryptographic processors e-commerce servers network storage servers network routers and switches access-control security systems point-of-sale terminals pin pads atms smart card readers set-top boxes casino gaming systems for related parts and recommended products to use with this part, refer to: www.maximintegrated.com/MAX36025.related deepcover security manager for tamper-reactive cryptographic-node control with aes encryption abridged data sheet MAX36025 for pricing, delivery, and ordering information, please contact maxim direct at 1-888-629-4642, or visit maxim integrateds website at www.maximintegrated.com.
2 functional diagram system diagram MAX36025 encrypted i 2 c auth gateway encryption and data routing aes engine a aes engine b sram controller spi interface 1 spi interface 2 serial flash interface rtc, rng temp sensor tamper detection controller tamper inputs cpu supervisor 1kb secure memory MAX36025 encrypted i 2 c auth gateway encryption and data routing aes engine a aes engine b spi interface 1 ciphertext plaintext ciphertext plaintext cpu supervisor 1kb secure memory external sram controller spi interface 2 c tamper detection (a/d tamper inputs, rng, rtc, power /t emp/ freq monitor) external circuitry external sram serial flash serial flash master MAX36025 deepcover security manager for tamper-reactive cryptographic-node control with aes encryption maxim integrated abridged data sheet
|
