Trusted Platform Module ST33KTPM2XSPI / ST33KTPM2X / ST33KTPM2A / ST33KTPM2I
Trusted Platform Module ST33KTPM2XSPI / ST33KTPM2X / ST33KTPM2A / ST33KTPM2I, from STMicroelectronics, holds FIPS 140-3 certificate #4737 at overall level 1. The validation is active, with a sunset date of 2029-07-24. Below are its validation history, algorithm certificates and security policy, drawn from the NIST CMVP entry.
Caveat: Interim validation, When operated in Approved mode
Certificate
| Certificate number | 4737 |
|---|---|
| Standard | FIPS 140-3 |
| Status | active |
| Sunset date | 2029-07-24 |
| Overall level | 1 |
| Module type | Hardware |
| Embodiment | Single Chip |
| Vendor | STMicroelectronics · website |
| Hardware versions | P/Ns ST33KTPM2XSPI [A, C], ST33KTPM2X [A], ST33KTPM2A [B] and ST33KTPM2I [B] |
| Firmware versions | 9.257 [A], 10.257 [B], 9.258 [C] |
Module description
Quoted from the NIST CMVP entry for this certificate.
The ST33KTPM2X, ST33KTPM2XSPI, ST33KTPM2X, ST33KTPM2A, ST33KTPM2I Trusted Platform Module (TPM) are hardware cryptographic modules which implement the TPM2.0 standard as defined by the Trusted Computing Group. TPMs are used primarily for the generation, storage, and management of cryptographic keys, as well was for secure storage of digital certificates.
Security level exceptions
- Physical security: Level 3
- Non-invasive security: N/A
- Mitigation of other attacks: N/A
Approved algorithms (27)
| Algorithm | CAVP certificates |
|---|---|
| AES-CBC | A2553 |
| AES-CFB128 | A2553 |
| AES-CTR | A2553 |
| AES-ECB | A2553 |
| AES-OFB | A2553 |
| ECDSA KeyGen (FIPS186-4) | A2555 |
| ECDSA KeyVer (FIPS186-4) | A2555 |
| ECDSA SigGen (FIPS186-4) | A2555 |
| ECDSA SigVer (FIPS186-4) | A2555 |
| Hash DRBG | A2547 |
| HMAC-SHA-1 | A2551, A2552 |
| HMAC-SHA2-256 | A2551, A2552 |
| HMAC-SHA2-384 | A2551, A2552 |
| HMAC-SHA3-256 | A2551, A2552 |
| HMAC-SHA3-384 | A2551, A2552 |
| KAS-ECC Sp800-56Ar3 | A2555 |
| KDF SP800-108 | A2550 |
| KTS-IFC | A2554 |
| RSA Decryption Primitive | A2554 |
| RSA KeyGen (FIPS186-4) | A2554 |
| RSA SigGen (FIPS186-4) | A2554 |
| RSA SigVer (FIPS186-4) | A2554 |
| SHA-1 | A2548, A2549 |
| SHA2-256 | A2548, A2549 |
| SHA2-384 | A2548, A2549 |
| SHA3-256 | A2548 |
| SHA3-384 | A2548 |
Tested configurations
- N/A
Validation history
| Date | Type | Lab |
|---|---|---|
| 2024-07-25 | Initial | UL Verification Services, Inc. |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status active
- Validation dates on record: 2024-07-25