The STSAFE-TPM (trusted platform module) family of products offers a broad portfolio of standardized solutions for embedded, PC, mobile and computing applications. STSAFE is an ST trademark.
It includes turnkey products compliant with the Trusted Computing Group (TCG) standards that provide services to protect the confidentiality, integrity and authenticity of information and devices.
These devices are easy to integrate thanks to the variety of supported interfaces and the availability of TPM ecosystem software solutions.
The STSAFE-TPM devices are all Common Criteria (EAL4+) and FIPS certified.
They embed an Arm® SecurCore® SC300™ processor with additional security features to help protect against advanced forms of attack.
The ST33TPHF2XSPI offers a slave serial peripheral interface (SPI) compliant with the TCG PC Client TPM Profile specifications.
It offers resilience services during the TPM firmware upgrade process, and self-recovery of TPM firmware and critical data upon failure detection.
The ST33TPHF2XSPI operates in the –25 to +85 °C commercial temperature range at 1.8 V, or in the –40 °C to 105 °C extended temperature range at 3.3 V.
The device is offered in TSSOP28 and VFQFPN32 ECOPACK2 packages. ECOPACK is an ST trademark.
- TPM features
- Flash-memory-based trusted platform module (TPM)
- Compliant with Trusted Computing Group (TCG) Trusted Platform Module (TPM) Library specifications 2.0, Level 0, Revision 138 and TCG PC Client Specific TPM Platform Specifications 1.03
- Fault-tolerant firmware loader that keeps the TPM fully functional when the loading process is interrupted (self-recovery)
- SP800-193 compliant for protection, detection and recovery requirements
- Targeted certifications:
- CC according to TPM 2.0 PP at EAL4+
- FIPS 140-2 level 2(physical security level 3)
- TCG certification
- SPI support at up to 33 MHz
- Hardware features
- Arm® SecurCore® SC300™ 32-bit RISC core
- Highly reliable Flash memory technology
- Extended temperature range: −40 °C to 105 °C
- ESD protection up to 4 kV (HBM)
- 1.8 V or 3.3 V supply voltage range
- Security features
- Active shield and environmental sensors
- Monitoring of environmental parameters (power)
- Hardware and software protection against fault injection
- FIPS compliant RNG built on an SP800-90A compliant SHA256 DRBG and an AIS-31 Class PTG2 compliant true random number generator (TRNG)
- Cryptographic algorithms:
- RSA key generation (1024 or 2048 bits)
- RSA signature (RSASSA-PSS,RSASSA-PKCS1v1_5)
- RSA encryption (RSAES-OAEP, RSAES-PKCS1-v1_5)
- SHA-1, SHA-2 (256 and 384 bits), SHA-3 (256 and 384 bits)
- HMAC SHA-1, SHA-2 and SHA-3
- AES-128,192 and 256 bits
- TDES 192 bits
- ECC (NIST P-256, P-384 curves): Key generation, ECDH and ECDSA, ECSchnorr
- ECDAA (BN-256 curve)
- Device provided with 3 EK and EK certificates (RSA2048, ECC NIST P_256 and ECC NIST P_384)
- Device provisioned with 3 RSA key pairs to reduce the TPM provisioning time
- Product compliance
- TPM 2.0 compliant with Microsoft® Windows® 8.1 and 10
- Compliant with Intel® TXT for TPM 2.0
- Compliant with TCG test suite for TPM 2.0
- TPM features
Recommended for you
|Part Number||Marketing Status||Package||RoHS Compliance Grade||Material Declaration**|
|TSSOP28 9.7 x 4.4||Ecopack2|
|VFQFPN 32 5x5x1.0||Ecopack2|
TSSOP28 9.7 x 4.4
RoHS Compliance Grade
(**) The Material Declaration forms available on st.com may be generic documents based on the most commonly used package within a package family. For this reason, they may not be 100% accurate for a specific device. Please contact our sales support for information on specific devices.