製品概要
概要
The STSAFE-TPM (Trusted Platform Module) family offers a broad portfolio of standardized solutions for embedded, PC, mobile and computing applications.
It includes turnkey products compliant with the Trusted Computing Group (TCG) standards that provide services to protect the confidentiality, integrity and authenticity of information and devices.
The STSAFE-TPM products are easy to integrate thanks to the variety of supported interfaces and the availability of TPM ecosystem software solutions.
These products are all Common Criteria (EAL4+) and FIPS certified.
The ST33TPHF2XI2C is based on a smartcard-class secure MCU.
The ST33TPHF2XI2C offers an I²C interface compliant with the TCG PC Client TPM Profile specifications.
The ST33TPHF2XI2C product offers resilience services during the TPM firmware upgrade process, and self-recovery of TPM firmware and critical data upon failure detection.
The ST33TPHF2XI2C operates in the –25 to +85 °C commercial temperature range at 1.8 V, or in the –40 °C to 105 °C extended temperature range at 3.3 V.
The device is offered in VFQFPN32 ECOPACK2 packages. ECOPACK is an ST trademark.
-
特徴
- TPM features
- Flash-memory-based trusted platform module (TPM)
- Compliant with Trusted Computing Group (TCG) Trusted Platform Module (TPM) Library specifications 2.0, Level 0, Revision 138 - errata 1.12 and TCG PC Client Specific TPM Platform Specifications 1.04 rev 37
- Fault-tolerant firmware loader that keeps the TPM fully functional when the loading process is interrupted (self-recovery)
- SP800-193 compliant for protection, detection and recovery requirements
- Targeted certifications:
- CC according to TPM 2.0 PP at EAL4+ (augmented with AVA_VAN.5 and ALC_FLR.1)
- FIPS 140-2 level 2 (physical security level 3)
- TCG certification
- I²C support at up to 400 kHz
- Supports up to 4 GPIOs mapped with NV storage indices.
- Hardware features
- Highly reliable Flash memory technology
- Extended temperature range: −40 °C to 105 °C
- ESD protection up to 4 kV (HBM) and 750 V (CDM)
- 1.8 V or 3.3 V supply voltage range
- Security features
- Active shield and environmental sensors
- Monitoring of environmental parameters (power)
- Hardware and software protection against fault injection
- FIPS SP800-90A and AIS20-compliant deterministic random-bit generator (DRBG)
- FIPS SP800-90B and AIS31-compliant true random-number generator (TRNG)
- Cryptographic algorithms:
- RSA key generation (1024, 2048 or 3072 bits)
- RSA signature (RSASSA-PSS, RSASSA-PKCS1v1_5)
- RSA encryption (RSAES-OAEP, RSAESPKCS1-v1_5)
- SHA-1, SHA-2 (256 and 384 bits), SHA-3 (256 and 384 bits)
- HMAC SHA-1, SHA-2, and SHA-3
- AES-128, 192, and 256 bits
- TDES 192 bits
- ECC (NIST P-256, P-384 curves): key generation, ECDH, and ECDSA, ECSchnorr
- ECDAA (BN-256 curve)
- Device provided with 3 endorsement keys (EK) and EK certificates (RSA2048, ECC NIST P_256 and ECC NIST P_384)
- Device provisioned with three 2048-bit RSA key pairs to reduce the TPM provisioning time
- Product compliance
- Compliant with Microsoft® Windows® Internet of things (IoT) core
- Compliant with Linux® drivers
- Compliant with the TCG test suite for TPM 2.0
- TPM features
