ST33GTPMII2C - Industrial TPM 2.0 device with an I2C interface, ST33GTPMII2C, STMicroelectronics

The ST33GTPMII2C is a cost-effective and high-performance trusted platform module (TPM) targeting industrial embedded systems.

The product implements the functions defined by the Trusted Computing Group (www.trustedcomputinggroup.org) in the TCG Trusted Platform Module Library SpecifICations version 2.0 Level 0 Revision 138 and errata version 1.4. It is also based on the TCG PC client-specific TPM Platform specifications rev1.03. The applicable protection profile is TCG Protection Profile for PC Client Specific TPM 2.0.
The product also supports the ability to upgrade the TPM firmware thanks to a persistent Flash memory loader application to support new standard evolutions.

主要特性

cription="features-description">
• TPM features
  • Flash-memory-based trusted platform module (TPM)
  • Compliant with Trusted Computing Group (TCG) Trusted Platform Module (TPM) Library specifications 2.0, Level 0, Revision 138 and TCG PC Client Specific TPM Platform Specifications 1.03
  • Fault-tolerant firmware loader that keeps the TPM fully functional when the loading process is interrupted (self-recovery)
  • SP800-193 compliant for protection, detection and recovery requirements
  • Targeted certifications:
    • CC according to TPM 2.0 PP at EAL4+
    • FIPS 140-2 level 2 (physical security level 3)
  • TCG certification
  • I²C support at up to 200 kHz
  • Supports up to 4 GPIOs mapped with NV storage indices
• Hardware features
  • Arm^® SecurCore^® SC300™ 32-bit RISC core
  • Highly reliable Flash memory technology:
    • 500 000 cycles on the full temperature range
    • Data retention: 17 years at 85 °C and 10 years at 105 °C
  • ESD (electrostatic discharge) protection against voltages greater than 4 kV (HBM)
  • 1.8 V, 3.3 V or 5 V supply voltage range
  • Industrial qualification (JEDEC)
  • Wafer-level chip-scale package (WLCSP) JEDEC J-STD-020D-compliant MSL1 package
• Security features
  • Active shield and environmental sensors
  • Monitoring of environmental parameters (power and clock)
  • Hardware and software protection against fault injection
  • FIPS compliant RNG built on an SP800-90A compliant SHA256 DRBG and an AIS-31 Class PTG2 compliant true random number generator (TRNG)
  • Cryptographic algorithms:
    • RSA key generation (1024 or 2048 bits)
    • RSA signature (RSASSA-PSS, RSASSA-PKCS1v1_5)
    • RSA encryption (RSAES-OAEP, RSAESPKCS1-v1_5)
    • SHA-1, SHA-2 (256 and 384 bits), SHA-3 (256 and 384 bits)
    • HMAC SHA-1, SHA-2 and SHA-3
    • AES-128,192 and 256 bits
    • TDES 192 bits
    • ECC (NIST P-256, P-384 curves): key generation, ECDH and ECDSA, ECSchnorr
    • ECDAA (BN-256 curve)
    • Device provided with 3 endorsement keys (EK) and EK certificates (RSA2048, ECC NIST P_256 and ECC NIST P_384)
    • Device provisioned with 3 RSA key pairs to reduce the TPM provisioning time
• Product compliance
  • Compliant with TCG test suite for TPM 2.0
  • Common Criteria certifications:
    • EAL 4+ on TCG TPM2.0 protection profile
    • EAL 5+ on hardware
  • Targets FIPS 140-2 level 2 certification (physical security level 3)

PDF下载地址：（复制到浏览器地址栏）
https://www.st.com/resource/en/data_brief/st33gtpmii2c.pdf