ST33TPM12I2C数据手册ST中文资料规格书

描述 Description

The ST33TPM12I2C is a cost-effective and high performance Trusted Platform Module (TPM) targeting embedded system applications.
This device implements the functions defined by the Trusted Computing Group (www.trustedcomputinggroup.org) in the TCG Trusted Platform Module Specifications version 1.2 Level 2 Revision 116 ([1][2][3]), and is also based on the TCG PC Client specific TPM interface specifications 1.21 [5] and the PC Client implementation specification for conventional BIOS [6] for what concerns the TPM internal register list and bit definitions.
The ST33TPM12I2C is based on a secure MCU hardware platform.
The ST33TPM12I2C is built on a 32-bit ARM® reduced instruction set computing (RISC) processor which provides high cryptographic and general performances. A crypto-processor NESCRYPT is also present to support efficiently all public key cryptographic algorithms.

特性 Features

• TPM features
• Single-chip Trusted Platform Module (TPM)
• Compliant with Trusted Computing Group (TCG) Trusted Platform Module (TPM) Main specifications 1.2, Level 2, Revision 116
• Based on TCG PC Client Specific TPM Interface Specifications 1.21
• Fully based on the common criteria (CC) EAL4+ certified LPC version ST33TPM12LPC
• I2C support in Standard mode (100 kHz) and Fast mode (400 kHz), supporting clock stretching
• Provisioned with Endorsement key and Endorsement Key certificate
• Support of clock suspension for power saving mode
• Support of Field Upgrade and Dictionary Attack protection
• Monotonic counter endurance guaranteed for 7 years
• Support of software and hardware physical presence
• Hardware features
• ARM®SecurCore®SC300™ 32-bit RISC core
• Highly reliable CMOS EEPROM submicron technology
• 30-year data retention at 25 °C
• 500 000 typical Erase/Write cycle endurance at 25 °C
• Temperature range: 0 °C to +70 °C
• ESD protection up to 4 kV (HBM)
• 3.3 V supply voltage range
• 28-lead thin shrink small outline and 32-lead very thin fine pitch quad flat pack ECOPACK®packages
• Security features
• Active shield and environmental sensors
• Memory protection unit (MPU)
• Monitoring of environmental parameters (power and clock)
• Hardware and software protection against fault injection
• AIS-31 Class P2 compliant true random number generator (TRNG)
• Cryptographic algorithms:
• RSA key generation from 512 to 2048 with a 2-byte step
• RSA signature and encryption
• SHA-1 and SHA-256
• AES-128 in CTR mode

• Performance and resource features
• SHA1 computation for 64-byte block: 155 μs1
• Signature with a 2048-bit key: 150 ms(a)
• Signature with a 1024-bit key: 30 ms(a)
• NV storage allocated space: 4 Kbytes (1.2 Kbytes used by EK certificate)
• Supported 2048-bit key slots:
• up to 10 key slots (without EK and SRK)
• 1 key slot in volatile memory for high-frequency loading use case