ST33TPHF20SPI datasheet(3/47 Pages) STMICROELECTRONICS

3 / 47 page

FIPS140-2 SECURITY POLICY

Page 3 of 47

NON-PROPRIETARY DOCUMENT

MODULE DESCRIPTION

1.1

Definition

The ST33TPHF20SPI / ST33TPHF20I2C Trusted Platform Module are fully integrated security

modules designed to be integrated into personal computers and other embedded systems.

The security module is used primarily for cryptographic key generation, key storage and key

management as well as generation and secure storage for digital certificates.

The TPM is a single chip cryptographic HW module as defined in [FIPS 140-2]. The single

silicon chip is encapsulated in a hard, opaque, production grade integrated circuit (IC)

package.

The cryptographic boundary is defined as the perimeter of the IC package. The security

module supports SPI and I2C interfaces compliant with the Trusted Computing Group (TCG)

specification for PC Client [PTP 0.43]. The HW and FW cryptographic boundaries are indicated

in §1.4 of the current document.

The security module implements version 2.0 of the Trusted Computing Group (TCG)

specification for Trusted Platform Modules (TPM).

1.2

Module identification

The hardware and firmware versions covered by the FIPS evaluation are identified as follow:



Hardware version: ST33HTPH revision A



Firmware version: 49.00 (SPI) / 4A.00 (SPI) / 49.04 (SPI) / 4A.04 (SPI) / 49.05 (I2C) /

4A.05 (I2C)

FW version can be retrieved via response to the command TPM2_GetCapability with property

set to TPM_PT_FIRMWARE_VERSION_1.

The

cryptographic services are provided by the cryptographic library “NesLib 5.1 for ST33”.

The product is manufactured in two packages:



TSSOP28



TSSOP 28-pin



4.4 x 9.7 mm



VQFN32



Very thin pitch Quad pack no-lead 32-pin



5 x 5 mm

The security module is available in the following configurations:

1.2.1

AHB3 / AHB4

These configurations of the security module implement both version 1.2 and version 2.0 of the

Trusted Computing Group (TCG) specification for Trusted Platform Modules (TPM). Versions

are exclusive and security module manufactured will operate in a default mode (TPM1.2 or

TPM2.0) depending on the configuration.

The current FIPS 140-2 level2 security policy applies to these security module configurations

when the module is irreversibly locked in TPM2.0 mode (cf. §1.7.3 for mode lock

recommendations). As a consequence the TPM FW version 1.2 is excluded from the security

requirements of FIPS 140-2.

ST33TPHF20SPI Arkusz danych(PDF) 3 Page - STMicroelectronics

ST33TPHF20SPI Arkusz danych(HTML) 3 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

Arkusz danych Pobierz

Link URL