ST33TPHF20SPI datasheet(24/47 Pages) STMICROELECTRONICS

24 / 47 page

FIPS140-2 SECURITY POLICY

Page 24 of 47

NON-PROPRIETARY DOCUMENT

They are used as reference values for comparison in case of password

authorization session.

platformPolicy

32 bytes authorization data (authPolicy) used in authorization session based

resp. on platform, endorsement, storage or lockout hierarchy policy.

platformPolicy is set to 0 at each TPM2_Startup (CLEAR).

endorsementPolicy / ownerPolicy / lockoutPolicy are set to 0 at first TPM power-

up.

Primary policies can be changed with command TPM2_SetPrimaryPolicy.

They are used as reference values for a comparison in case of policy session.

TPM2_Change

PPS

endorsementPolicy

TPM2_Clear /

TPM2_Change

EPS

ownerPolicy

TPM2_Clear

lockoutPolicy

TPM2_Clear

Objects

authValue

0 to 32 bytes authorization data defined during object creation

(TPM2_Create/TPM2_CreatePrimary) used to authorize commands based on

this object.

Value can be changed with command TPM2_ObjectChangeAuth.

It is used as:



HMAC and/or KDFa keys or part of keys in authorization session based on

HMAC or password (usage is the same than for CSPs 9/10/11/12)



Secret value extended into policyDigest on TPM2_PolicySecret command

TPM2_Clear

(owner &

endorsement)

TPM2_Change

PPS (platform)

TPM2_Change

EPS

(endorsement)

authPolicy

0 to 32 bytes authorization data defined during object creation

(TPM2_Create/TPM2_CreatePrimary) used to authorize commands based on

this object.

It is used as reference value for a comparison in case of policy session

TPM2_Clear

(owner &

endorsement)

TPM2_Change

PPS (platform)

TPM2_Change

EPS

(endorsement)

seed

32 random bytes generated by HDRBG if object parent is not a hierarchy (if

hierarchy, primary seed is used, cf. CSPs 1/2/3/4).

It is used as key for:



KDFa to generate seedValue and sensitive during object creation (cf.

[TPM2.0 Part1 r1.16] §27.6.4)

Transient value

only available

during object

creation

seedValue

32 bytes generated from seed (CSP 19) or one of the primary seeds (CSP

1/2/3/4) through use of KDFa. Set to 0 for asymmetric keys that are not used as

storage key.

It is used (when not set to 0) as:



ata in SHA computation to generate object’s unique value (HMAC and

symmetric key creation)



Key in KDFa to generate a symmetric encryption key used in

TPM2B_PRIVATE structure en/decryption.



Key in KDFa to generate HMAC key used in TPM2B_PRIVATE integrity

protection generation or verification

TPM2_Clear

(owner &

endorsement)

TPM2_Change

PPS (platform)

TPM2_Change

EPS

(endorsement)

symKey

16 bytes generated from derivation of seedValue through KDFa usage.

It is used as key for:



Symmetric en/decryption of TPM2B_PRIVATE structure

Transient value

only available

during

command

processing

hmacKey

32 bytes generated from derivation of seedValue through KDFa usage.

It is used as key for:

Transient value

only available

during

command

processing

ST33TPHF20SPI 数据表(PDF) 24 Page - STMicroelectronics

ST33TPHF20SPI 数据表(HTML) 24 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

数据表下载

链接网址

ST33TPHF20SPI 数据表(PDF) 24 Page - STMicroelectronics

ST33TPHF20SPI 数据表(HTML) 24 Page - STMicroelectronics

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47

数据表 下载

链接网址

数据表下载