Module Name
Trusted Platform Module ST33TPHF2XSPI [A], ST33TPHF2XI2C [B], ST33GTPMASPI [C], ST33GTPMAI2C [D], ST33GTPMISPI [E] & ST33GTPMII2C [F]
Validation Dates
05/06/2020;08/20/2020;12/11/2020
Caveat
When operated in FIPS mode and installed, initialized and configured as specified in Section 1.7 of the Security Policy
Security Level Exceptions
- Physical Security: Level 3
Description
The Trusted Platform Module ST33TPHF2XSPI, ST33TPHF2XI2C, ST33GTPMASPI & ST33GTPMAI2C (TPM) is a hardware cryptographic module which implements advanced cryptographic algorithms, including symmetric and asymmetric cryptography, as well as key and random number generation.
The TPM is a complete solution implementing the Trusted Platform Module Library Specification, Family "2.0", Level 00, Revision 01.38, September 2016. See www.trustedcomputinggroup.org for further information on TCG and TPM.
FIPS Algorithms
| AES |
Certs. #C957, #C958, #C959, #C960, #C961 and #C1658 |
| CKG |
vendor affirmed |
| CVL |
Certs. #C955 and #C956 |
| DRBG |
Cert. #C928 |
| ECDSA |
Certs. #C955, #C956, #C957, #C958, #C959, #C960, #C961 and #C1658 |
| HMAC |
Certs. #C951, #C952, #C954, #C962, #C963, #C964, #C1656 and #C1657 |
| KAS-SSC |
vendor affirmed |
| KBKDF |
Certs. #C951, #C952, #C954 and #C1656 |
| KDA |
vendor affirmed |
| KTS |
AES Certs. #C957, #C958, #C959, #C960, #C961 and #C1658 and HMAC Certs. #C951, #C952, #C954 and #C1656; key establishment methodology provides 128 bits or 256 bits of encryption strength |
| KTS |
vendor affirmed |
| RSA |
Certs. #C957, #C958, #C959, #C960, #C961 and #C1658 |
| SHA-3 |
Cert. #C928 |
| SHS |
Cert. #C928 |
| Triple-DES |
Certs. #C957, #C958, #C959, #C960, #C961 and #C1658 |
Hardware Versions
ST33HTPH revision A [A [1, 2 and 3]], ST33HTPH revision A [B [4 and 5]], ST33G1M2A revision F [C [6] and E [7]] and ST33G1M2A revision F [D [8] and F [9]]
Firmware Versions
00.01.01.00 [1], 00.01.01.01 [2], 00.01.01.02 [3], 00.02.01.00 [4], 00.02.01.10 [5], 00.03.01.00 [6], 00.03.01.01 [7], 00.06.01.00 [8] and 00.06.01.01 [9]
) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)
