ST33TPHF20SPI datasheet(26/47 Pages) STMICROELECTRONICS

26 / 47 page

FIPS140-2 SECURITY POLICY

Page 26 of 47

NON-PROPRIETARY DOCUMENT

symKey, IV

2*16 bytes derived from the concatenation of contextKey and one of the proof

(CSP 5, 6, 7, 8). It is used as key and IV for:



Symmetric en/decryption of context blob

Transient value

only available

during

TPM2_ContextS

ave /

TPM2_ContextL

oad processing

Duplication

inner symKey

Symmetric key passed as input to duplication commands or generated by

HDRBG (size depends on symmetric algorithm used).

It is used as:



Symmetric en/decryption key to protect TPM2B_PRIVATE output structure

Transient value

only available

during

command

processing

seed

32 bytes value randomly generated by HDRBG if new parent is a RSA key or

via KDFe if new parent is an ECC key.

It is used as key for :



KDFa to generate a symmetric en/decryption key for outer protection



KDFa to generate a HMAC key for outer integrity protection

outer symKey

Symmetric key generated via KDFa from seed. It is used as key for:



Symmetric en/decryption key for outer protection of TPM2B_PRIVATE

output structure

outer hmacKey

HMAC key generated via KDFa from seed. It is used as key for:



HMAC integrity key for outer protection of TPM2B_PRIVATE output

structure

Credential

seed

32 bytes value randomly generated by HDRBG if new parent is a RSA key or

via KDFe if new parent is an ECC key.

It is used as key for :



KDFa to generate a symmetric en/decryption key for outer protection



KDFa to generate a HMAC key for outer integrity protection

Transient value

only available

during

command

processing

symKey

Symmetric key generated via KDFa from seed. It is used as key for:



Symmetric en/decryption key for outer protection of credentialBlob

hmacKey

HMAC key generated via KDFa from seed. It is used as key for:



HMAC integrity key for outer protection of credentialBlob

DRBG

DRBG state

Internal state (V and C secret values) of the HDRBG (based on SHA256) stored

in RAM.

TPM2_Clear

ECC

commitNonce

32 bytes value randomly generated by HDRBG at each TPM2_Startup

(CLEAR).

It is used as key for :



KDFa to generate an ECC ephemeral private key used in

TPM2_EC_Ephemeral command / TPM2_ZGen_2Phase

Transient value

only available

during

command

processing

ephemeral key

–

derived from

commitNonce

ECC private key (size depends on curve selected) generated with KDFa from

commitNonce. It is used as ephemeral private key in:



TPM2_Ephemeral command (scalar multiplication) to generate the

associated ephemeral public key



TPM2_Zgen_2Phase (ECDH scheme) to generate outZ2 (output point)

ephemeral key

ECC private key (size depends on curve selected) generated with HDRBG. It is

used as ephemeral private key in:



TPM2_ECDH_KeyGen command (ECDH scheme) to generate zPoint

(output point)

ST33TPHF20SPI Datasheet(PDF) 26 Page - STMicroelectronics

ST33TPHF20SPI Datasheet(HTML) 26 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

Datasheet Download

Link URL