ST33TPHF20SPI datasheet(16/47 Pages) STMICROELECTRONICS

16 / 47 page

FIPS140-2 SECURITY POLICY

Page 16 of 47

NON-PROPRIETARY DOCUMENT

KTS (AES

cert #4336 +

HMAC cert

#2875)

KTS (AES

cert #4336 +

HMAC cert

#3122)

KTS (AES

cert #4336 +

HMAC cert

#3124)

3539

SHS

FIPS 180-4

SHA-1, SHA-256

Message digest

Vendor

affirmation

CKG

SP800-133

(per IG D.12)

Direct generation,

Generation

Key generation1

Table 10: Allowed algorithms

Algorithm

Caveat

Use

RSA

Key length = 1024 bits

Digital signature verification

RSA key

wrapping

Key length = 2048 bits

Key establishment

SHA-1

Digital signature verification

NDRNG

Seed or reseed DRBG 800-90A (with approximatively 366 bits of

entropy). Generate random numbers not dedicated to be used as

cryptographic material.

Table 11: Non-approved algorithms

Algorithm

Use

RSA (key length = 1024 bits)

Key and digital signature generation

SHA-1

Digital signature generation

ECSchnorr

Digital signature generation and verification

ECDAA

Digital signature generation

1.7

Modes of Operation

This security policy only applies to the security module when TPM operator follows the

recommendations from:



§1.7.1 to set and irreversibility lock the security module in the TPM2.0 mode and

exclude the non-compliant mode TPM1.2 that is outside the scope of the evaluation



§1.7.2 to execute all self-tests required in a FIPS 140-2 approved mode of operation



§1.7.3 to use the security module in a FIPS 140-2 approved mode of operation

1 Symmetric keys and seeds used for generating the asymmetric keys are either generated by using

KBKDF or DRBG methods. Methods are detailed per CSPs in Table 17: Keys and CSPs list.

ST33TPHF20SPI Datasheet(PDF) 16 Page - STMicroelectronics

ST33TPHF20SPI Datasheet(HTML) 16 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

Datasheet Download

Link URL