The STSAFE-TPM (trusted platform module) family of products offers a broad portfolio of standardized solutions for embedded, PC, mobile, and computing applications. STSAFE is an ST trademark.

It includes turnkey products compliant with the Trusted Computing Group (TCG) standards that provide services to protect the confidentiality, integrity and authenticity of information and devices.

The STSAFE-TPM devices are easy to integrate thanks to the variety of supported interfaces and the availability of TPM ecosystem software solutions.

The STSAFE-TPM devices target all Common Criteria (EAL4+), and FIPS 140-3 certification.

The ST33KTPM2I, by default, offers two exclusive configurations:

a slave serial peripheral interface (SPI)

a target I²C interface.

Both of these configurations are compliant with the TCG PC Client TPM Profile specifications.

It offers resilience services during the TPM firmware upgrade process, and self-recovery of TPM firmware and critical data upon failure detection.

The ST33KTPM2I operates in the –40 °C to 105 °C extended temperature range.

The ST33KTPM2I devices are qualified for industrial and consumer applications and are offered in TCG standardized UFQFPN32 wettable flanks and WLCSP24 packages.

• TPM features
  • Flash memory-based trusted platform module (TPM)
  • Compliant with Trusted Computing Group (TCG) trusted platform module (TPM) library specifications 2.0, revision 1.59 errata version 1.4, and TCG PC client platform TPM profile (PTP) for TPM 2.0 version 1.06
  • Fault-tolerant firmware loader that keeps the TPM fully functional when the loading process is interrupted
  • Firmware image signed with ECDSA and PQC signature LMS (SP800-208)
  • SP800-193 compliant for protection, detection and recovery requirements
  • Targeted certifications:
    
    • Common Criteria EAL4+ in compliance with the TPM 2.0 protection profile (augmented with AVA_VAN.5, resistant to high-potential attacks)
    
    
    • FIPS 140-3 with physical security level 3
    
    
    • TCG certification
    
    
• Hardware features
  • Highly reliable flash memory with error correction code
  • Extended temperature range: −40 °C to 105 °C
  • Electrostatic discharge (ESD) protection up to 4 kV (HBM)
  • 1.8 V or 3.3 V supply voltage range
  • SPI support at up to 48 MHz
  • I²C support at up to 1 MHz
• Security features
  • Active shield
  • Monitoring of environmental parameters
  • Hardware and software protection against fault injection and side channel attacks
  • NIST SP800-90A and AIS20-compliant deterministic random-bit generator (DRBG)
  • NIST SP800-90B and AIS31-compliant true random-number generator (TRNG)
  • Cryptographic algorithms:
    
    • RSA key generation (1024, 2048, 3072 and 4096 bits)
    
    
    • RSA signature (RSASSA-PSS, RSASSA-1v1_5)
    
    
    • RSA encryption (RSAES-OAEP, RSAES-1-v1_5)
    
    
    • SHA-1, SHA-2 (256, 384 and 512 bits), SHA-3 (256 and 384 bits)
    
    
    • HMAC SHA-1, SHA-2, and SHA-3
    
    
    • AES-128, 192, and 256 bits
    
    
    • ECC key generation (NIST P_256/384/521, Brainpool P_256/384/512_R1, BN P_256, Curve448)
    
    
    • ECC secret sharing (ECDH, X448)
    
    
    • ECC signature (ECDSA, ECSchnorr, ECDAA, Ed448)
    
    
  • Device provided with four endorsement keys (EK) and EK certificates (RSA2048, RSA3072, ECC NIST P-256 and ECC NIST P-384)
  • Device provisioned with three 2048-bit RSA key pairs to reduce the TPM provisioning time
• Product targeted compliance
  • Compliant with Microsoft^® Windows^® 10 and 11
  • Compliant with Linux^® drivers
  • Compliant with Intel^® vPro^® technology
  • Compliant with TCG test suite for TPM 2.0
  • Compliant with the open-source TCG TPM 2.0 TSS implementation