ST33TPHF20SPI datasheet(37/47 Pages) STMICROELECTRONICS

37 / 47 page

FIPS140-2 SECURITY POLICY

Page 37 of 47

NON-PROPRIETARY DOCUMENT

TPM2_NV_Read

data

Output

AES CFB (**)

TPM2_NV_Write

data

Input

AES CFB (*)

TPM2_ObjectChangeAuth

newAuth

Input

AES CFB (*)

outPrivate

Output

AES CFB

TPM2_PCR_Event

eventData

Input

AES CFB (*)

TPM2_Rewrap

inDuplicate

Input

AES CFB

inSymSeed

Input

RSA OAEP or ECDH

outDuplicate

Output

AES CFB

outSymSeed

Output

RSA OAEP or ECDH

TPM2_RSA_Decrypt

message

Output

AES CFB (**)

TPM2_RSA_Encrypt

message

Input

AES CFB (*)

TPM2_SequenceComplete

buffer

Input

AES CFB (*)

TPM2_SequenceUpdate

buffer

Input

AES CFB (*)

TPM2_SetPrimaryPolicy

authPolicy

Input

AES CFB (*)

TPM2_StirRandom

inData

Input

AES CFB (*)

TPM2_Unseal

outData

Output

AES CFB (**)

TPM2_EncryptDecrypt

outData

Output

AES CFB (**)

(*): Parameter decryption is ensured by use of a decryption session (attribute DECRYPT set)

(**): Parameter encryption is ensured by use of an encryption session (attribute ENCRYPT set). This is

mandatory if output data is a CSP.

3.3.2

Key transport

Relative security strength has been calculated for each cryptographic algorithm supported by

the module and used for key transport. TPM FW prevents use of key in a transport scheme

with lower strength than the transported key.

Table 20: Cryptographic Functions

Algorithm

Comparable number

of bits of security

RSA OAEP (2048 bits)

112

ECDH (P-224 curve)

112

ECDH (P-256 curve)

128

AES CFB (128 bits)1

128

AES CFB (256 bits)2

256

1 AES is used in conjunction with HMAC approved authentication method ([SP800-38F] compliant)

2 AES is used in conjunction with HMAC approved authentication method ([SP800-38F] compliant)

ST33TPHF20SPI 데이터시트(PDF) 37 Page - STMicroelectronics

ST33TPHF20SPI 데이터시트(HTML) 37 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

데이터시트 다운로드

링크 URL