ST claims first FIPS 140-3 certified TPMs

Meeting the latest standard for information security certification, mandatory for U.S. federal procurement, STMicroelectronics has announced the FIPS 140-3 certification of its STSAFE-TPM trusted platform modules (TPMs), claiming the first standardized cryptographic modules on the market to receive this certificate. FIPS 140-3 is the latest version of the federal information processing standards (FIPS) specifications for cryptographic modules.

(Source: STMicroelectronics)

The certified TPMs, the ST33KTPM2X, ST33KTPM2XSPI, ST33KTPM2XI2C, ST33KTPM2I and ST33KTPM2A, provide cryptographic asset protection to meet security and regulatory requirements for critical information systems. These TPMs target PCs, servers and network-connected IoT devices, as well as medical and infrastructure high-assurance equipment. The ST33KTPM2I is qualified for long lifetime industrial systems and the ST33KTPM2A commercialized under the name STSAFE-V100-TPM uses an AEC-Q100-qualified hardware platform required for automotive applications.

These TPMs can be used for secure boot, remote/anonymous attestation and secure storage with an extended user memory of 200 kBytes. They also provide secure firmware update to add new cryptographic algorithms like PQC and maintain state-of-the-art cryptographic asset protection, ST said.

The STSAFE-TPM devices are compliant with multiple industry security standards. These include Trusted Computing Group TPM 2.0 applicable to trusted platform modules, Common Criteria EAL4+, passing the CC framework’s most stringent vulnerability analysis (AVA_VAN.5), and FIPS 140-3 level 1 with physical security level 3. Cryptographic services include ECDSA & ECDH up to 384 bits; RSA up to 4096 including key generation; and AES up to 256 bits as well as SHA1, SHA2 and SHA3.

ST offers provisioning services to load device keys and certificates. These services reduce the total solution cost and time to market and guarantees the security of the supply chain, the company said.