{ "meta": { "dataset_version": "0.1.0-dev", "evidence_type_counts": { "certification": 315, "datasheet": 349, "marketing": 38 }, "key_field_coverage_pct_adjacent": 47.1, "key_field_coverage_pct_tpm": 53.2, "methodology": "METHODOLOGY.md", "record_class_counts": { "adjacent": 8, "tpm": 71 }, "records": 79, "records_full": 79, "referenced_source_entries": 425, "source_citations": 702, "source_registry_entries": 702, "spec": "CycloneDX 1.7", "tier_distribution_adjacent": { "1": 1, "unknown": 7 }, "tier_distribution_tpm": { "0": 31, "1": 3, "2": 5, "3": 1, "unknown": 31 } }, "models": [ { "algorithms": [], "cbom": "cbom/amd-ftpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "firmware", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "fTPM", "model_id": "ftpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/amd/ftpm.yaml", "record_class": "tpm", "record_json": "records/amd-ftpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 7, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "amd", "vendor_claims_count": 0, "vendor_name": "AMD", "vulnerabilities": [ "CVE-2025-2884" ] }, { "algorithms": [ "TPM_ALG_ECDSA", "TPM_ALG_RSAPSS" ], "cbom": "cbom/amd-sev-snp-vcek.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": true, "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "SEV-SNP VCEK attestation root", "model_id": "sev-snp-vcek", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/amd/sev-snp-vcek.yaml", "record_class": "adjacent", "record_json": "records/amd-sev-snp-vcek.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 2, "status": "active", "tcg_certified": "unknown", "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "amd", "vendor_claims_count": 0, "vendor_name": "AMD", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_CMAC", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_EDDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512" ], "cbom": "cbom/apple-secure-enclave.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": true, "fips": [ { "cert": "5306", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5305", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5307", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5304", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5303", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5289", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5030", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5025", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "4757", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "4756", "level": 2, "standard": "140-3", "status": "active" } ], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": [ "SoC-fabric integrated (no external bus); dedicated secure nonvolatile storage attached via a dedicated I2C bus (EEPROM or Secure Storage Component depending on SoC)" ], "library_revision": "unknown", "model": "Secure Enclave (SoC-integrated)", "model_id": "secure-enclave", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/apple/secure-enclave.yaml", "record_class": "adjacent", "record_json": "records/apple-secure-enclave.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 26, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "apple", "vendor_claims_count": 2, "vendor_name": "Apple", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/apple-t1.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": "unknown", "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "T1 Chip", "model_id": "t1", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/apple/t1.yaml", "record_class": "adjacent", "record_json": "records/apple-t1.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "eol", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "apple", "vendor_claims_count": 0, "vendor_name": "Apple", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_EDDSA", "TPM_ALG_HMAC", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512" ], "cbom": "cbom/apple-t2.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": true, "fips": [ { "cert": "4756", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5307", "level": 2, "standard": "140-3", "status": "active" }, { "cert": "5303", "level": 2, "standard": "140-3", "status": "active" } ], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": [ "Serves the verified UEFI firmware image to the Intel CPU over eSPI (enhanced Serial Peripheral Interface); internal SSD storage is directly connected to the T2; embedded Secure Enclave with EEPROM secure storage" ], "library_revision": "unknown", "model": "T2 Security Chip", "model_id": "t2", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/apple/t2.yaml", "record_class": "adjacent", "record_json": "records/apple-t2.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 15, "status": "nrnd", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "apple", "vendor_claims_count": 0, "vendor_name": "Apple", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/atmel-at97sc3202.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "marketing", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "AT97SC3202", "model_id": "at97sc3202", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3202.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3202.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "announced", "tcg_certified": false, "tier": "unknown", "tier_basis": "announced-claim-based", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3203.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "unknown", "model": "AT97SC3203", "model_id": "at97sc3203", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3203.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3203.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 4, "status": "nrnd", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3203s.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "unknown", "model": "AT97SC3203S", "model_id": "at97sc3203s", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3203s.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3203s.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 4, "status": "nrnd", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3204.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": false, "fips": [ { "cert": "2014", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "116", "model": "AT97SC3204", "model_id": "at97sc3204", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3204.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3204.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 8, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3204t.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "116", "model": "AT97SC3204T", "model_id": "at97sc3204t", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3204t.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3204t.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 8, "status": "nrnd", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3205.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": false, "fips": [ { "cert": "2014", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "spi" ], "library_revision": "116", "model": "AT97SC3205", "model_id": "at97sc3205", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3205.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3205.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 10, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/atmel-at97sc3205t.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": false, "fips": [ { "cert": "2014", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "116", "model": "AT97SC3205T", "model_id": "at97sc3205t", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/atmel/at97sc3205t.yaml", "record_class": "tpm", "record_json": "records/atmel-at97sc3205t.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 9, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "atmel", "vendor_claims_count": 0, "vendor_name": "Atmel", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/aws-nitrotpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": false, "fips": [], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": [ "crb" ], "library_revision": "unknown", "model": "NitroTPM", "model_id": "nitrotpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "EC2 NitroTPM", "platform_hardware_root_present": true, "protection_class": "Hardware-rooted Nitro platform; public component-level binding for NitroTPM is undocumented", "tenant_hardware_attestation": "unknown", "vtpm_execution_hardware_isolated": "unknown" } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/aws/nitrotpm.yaml", "record_class": "tpm", "record_json": "records/aws-nitrotpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 7, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "aws", "vendor_claims_count": 0, "vendor_name": "Amazon Web Services", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/broadcom-bcm0102.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "BCM0102", "model_id": "bcm0102", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/broadcom/bcm0102.yaml", "record_class": "tpm", "record_json": "records/broadcom-bcm0102.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 9, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "broadcom", "vendor_claims_count": 0, "vendor_name": "Broadcom", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/broadcom-bcm5752.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "marketing", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "integrated", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "BCM5752", "model_id": "bcm5752", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/broadcom/bcm5752.yaml", "record_class": "tpm", "record_json": "records/broadcom-bcm5752.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "broadcom", "vendor_claims_count": 0, "vendor_name": "Broadcom", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384" ], "cbom": "cbom/coconut-svsm-svsm-vtpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "software", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "COCONUT-SVSM vTPM", "model_id": "svsm-vtpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/coconut-svsm/svsm-vtpm.yaml", "record_class": "tpm", "record_json": "records/coconut-svsm-svsm-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 8, "status": "active", "tcg_certified": "unknown", "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "coconut-svsm", "vendor_claims_count": 0, "vendor_name": "COCONUT-SVSM project", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/dyber-quantatpm.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "QuantaTPM", "model_id": "quantatpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/dyber/quantatpm.yaml", "record_class": "tpm", "record_json": "records/dyber-quantatpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 8, "status": "announced", "tcg_certified": false, "tier": "unknown", "tier_basis": "announced-claim-based", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "dyber", "vendor_claims_count": 11, "vendor_name": "Dyber", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/google-gcp-vtpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": false, "fips": [ { "cert": "3678", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Google Cloud vTPM (Shielded VM)", "model_id": "gcp-vtpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "Shielded VM Google-managed vTPM", "platform_hardware_root_present": "unknown", "protection_class": "Software vTPM with operator-issued EK/AK identity", "tenant_hardware_attestation": "unknown", "vtpm_execution_hardware_isolated": "unknown" }, { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "Confidential VM with AMD SEV-SNP", "platform_hardware_root_present": true, "protection_class": "Software vTPM plus a separate AMD hardware attestation surface", "tenant_hardware_attestation": true, "vtpm_execution_hardware_isolated": "unknown" }, { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "Confidential VM with Intel TDX", "platform_hardware_root_present": true, "protection_class": "Software vTPM plus a separate Intel TDX hardware attestation surface", "tenant_hardware_attestation": true, "vtpm_execution_hardware_isolated": "unknown" } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/google/gcp-vtpm.yaml", "record_class": "tpm", "record_json": "records/google-gcp-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 8, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "google", "vendor_claims_count": 0, "vendor_name": "Google", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/google-h1-cr50.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "unknown", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "spi", "i2c" ], "library_revision": "derived from TPM 2.0 library specification sample code rev 01.16 (chromiumos/third_party/tpm2 baseline)", "model": "H1 (Cr50 / Ti50 firmware)", "model_id": "h1-cr50", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/google/h1-cr50.yaml", "record_class": "tpm", "record_json": "records/google-h1-cr50.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 7, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "google", "vendor_claims_count": 0, "vendor_name": "Google", "vulnerabilities": [ "CVE-2025-2884" ] }, { "algorithms": [ "TPM_ALG_AES" ], "cbom": "cbom/google-titan.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "marketing", "family": "n/a", "field_upgradeable": true, "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": [ "SPI bus to the application processor; Titan interposes between the AP and the AP's boot-firmware flash; provisioning harness uses SPI, reset and UART" ], "library_revision": "unknown", "model": "Titan (server root of trust)", "model_id": "titan", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/google/titan.yaml", "record_class": "adjacent", "record_json": "records/google-titan.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "google", "vendor_claims_count": 2, "vendor_name": "Google", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_CMAC", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_RSA", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512", "TPM_ALG_TDES" ], "cbom": "cbom/google-titan-m.cdx.json", "cc": [ { "eal": "EAL4+ (ATE_DPT.2, ALC_DVS.2, AVA_VAN.5)", "id": "NSCIB-CC-2300073-03" }, { "eal": "EAL4+ (ALC_DVS.2, ATE_DPT.2, AVA_VAN.5)", "id": "NSCIB-CC-2300073-02" }, { "eal": "EAL4+ (ALC_DVS.2, ATE_DPT.2, AVA_VAN.5)", "id": "NSCIB-CC-0228971" } ], "confidence": "high", "evidence_floor": "marketing", "family": "n/a", "field_upgradeable": true, "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "Titan M / M2", "model_id": "titan-m", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/google/titan-m.yaml", "record_class": "adjacent", "record_json": "records/google-titan-m.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 11, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "google", "vendor_claims_count": 4, "vendor_name": "Google", "vulnerabilities": [ "CVE-2022-20233", "CVE-2022-20159", "CVE-2022-20162", "CVE-2022-20165" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_CAMELLIA", "TPM_ALG_CMAC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECMQV", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_KDF2", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512", "TPM_ALG_SM2", "TPM_ALG_XOR" ], "cbom": "cbom/ibm-ibmswtpm2.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "software", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 183 (spec date 2024-01-25) at pinned tag rev183-2024-08-02", "model": "ibmswtpm2", "model_id": "ibmswtpm2", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/ibm/ibmswtpm2.yaml", "record_class": "tpm", "record_json": "records/ibm-ibmswtpm2.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 9, "status": "active", "tcg_certified": "unknown", "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "ibm", "vendor_claims_count": 0, "vendor_name": "IBM", "vulnerabilities": [ "CVE-2023-1017", "CVE-2023-1018" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_TDES" ], "cbom": "cbom/infineon-slb-9635.cdx.json", "cc": [ { "eal": "EAL4 augmented by ALC_FLR.1 and AVA_VAN.4", "id": "BSI-DSZ-CC-0573-2009" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "TPM Main Specification 1.2 Rev. 103 (FW 3.17); FW 3.19 TCG-certified at Rev. 116", "model": "SLB 9635", "model_id": "slb-9635", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9635.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9635.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 8, "status": "unknown", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_RSA" ], "cbom": "cbom/infineon-slb-9645.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "TPM Main Specification 1.2 Rev. 116", "model": "SLB 9645", "model_id": "slb-9645", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9645.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9645.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 6, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_RSA" ], "cbom": "cbom/infineon-slb-9655.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "SLB 9655", "model_id": "slb-9655", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9655.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9655.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 4, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_RSA" ], "cbom": "cbom/infineon-slb-9656.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "TPM Main Specification 1.2 Revision 116 (FW 4.32)", "model": "SLB 9656", "model_id": "slb-9656", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9656.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9656.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "unknown", "tcg_certified": true, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/infineon-slb-9660.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0844" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0844-V2" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [ { "cert": "2556", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "2959", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "LPC" ], "library_revision": "1.2 rev 116", "model": "SLB 9660", "model_id": "slb-9660", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9660.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9660.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 9, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/infineon-slb-9665.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0965" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1020 / 1020-V2" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1056" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "2959", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "2556", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "LPC" ], "library_revision": "1.16", "model": "SLB 9665", "model_id": "slb-9665", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9665.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9665.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 14, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 over the firmware code", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/infineon-slb-9670-tpm12.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0958" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0958-V2" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [ { "cert": "2556", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "SPI" ], "library_revision": "1.2 rev 116", "model": "SLB 9670 (TPM 1.2)", "model_id": "slb-9670-tpm12", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9670-tpm12.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9670-tpm12.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 11, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/infineon-slb-9670-tpm20.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-0998" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1021 / 1021-V2" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1057" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1058" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1086" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "2959", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3203", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3492", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "SPI" ], "library_revision": "1.16 (FW 7.80 era; TCG lists FW 7.85 as Revision 1.38)", "model": "SLB 9670 (TPM 2.0)", "model_id": "slb-9670-tpm20", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9670-tpm20.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9670-tpm20.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 18, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 over the firmware code", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [ "CVE-2017-15361" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384" ], "cbom": "cbom/infineon-slb-9672.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1277" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "BSI-DSZ-CC-1113-V6" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1244" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1178-V5" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1245" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1278" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1179-V5" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1246" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1279" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4347", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "4467", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "4468", "level": 2, "standard": "140-2", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "SPI" ], "library_revision": "1.59", "model": "SLB 9672", "model_id": "slb-9672", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9672.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9672.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 23, "status": "active", "tcg_certified": true, "tier": "2", "tier_basis": "claim-assisted", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "ECDSA NIST P-521 with SHA-512 over the firmware manifest, plus a parallel XMSS signature; SHA-512 post-installation digest", "vendor": "infineon", "vendor_claims_count": 4, "vendor_name": "Infineon Technologies", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384" ], "cbom": "cbom/infineon-slb-9673.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1178-V5" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1245" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1278" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1179-V5" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1246" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1279" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4467", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "4468", "level": 2, "standard": "140-2", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "I2C (up to 1 MHz, clock stretching, 7-bit address, default 0x2E)" ], "library_revision": "1.59", "model": "SLB 9673", "model_id": "slb-9673", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slb-9673.yaml", "record_class": "tpm", "record_json": "records/infineon-slb-9673.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 16, "status": "active", "tcg_certified": true, "tier": "1", "tier_basis": "evidence", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "ECDSA NIST P-521 with SHA-512 over the firmware manifest, plus a parallel XMSS signature; manifest digest algorithm TPM_ALG_SHA384 or TPM_ALG_SHA512", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/infineon-sli-9670.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1100" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "3747", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "SPI" ], "library_revision": "1.38", "model": "SLI 9670", "model_id": "sli-9670", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/sli-9670.yaml", "record_class": "tpm", "record_json": "records/infineon-sli-9670.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 12, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 over the firmware code", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/infineon-slm-9670.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "BSI-DSZ-CC-1100" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "3747", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "SPI (up to 43 MHz, SPI mode 0)" ], "library_revision": "1.38", "model": "SLM 9670", "model_id": "slm-9670", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/infineon/slm-9670.yaml", "record_class": "tpm", "record_json": "records/infineon-slm-9670.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 12, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 over the firmware code", "vendor": "infineon", "vendor_claims_count": 0, "vendor_name": "Infineon Technologies", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/intel-itpm.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "integrated", "implements_v185_pqc_commands": "unknown", "interfaces": [ "LPC (TPM TIS / TPM Interface Specification)" ], "library_revision": "unknown", "model": "iTPM (ACPI INTC0102)", "model_id": "itpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/intel/itpm.yaml", "record_class": "tpm", "record_json": "records/intel-itpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "intel", "vendor_claims_count": 0, "vendor_name": "Intel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_RSA" ], "cbom": "cbom/intel-ptt.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "firmware", "implements_v185_pqc_commands": "unknown", "interfaces": [ "CRB (Command Response Buffer)" ], "library_revision": "unknown", "model": "PTT (Platform Trust Technology)", "model_id": "ptt", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/intel/ptt.yaml", "record_class": "tpm", "record_json": "records/intel-ptt.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 6, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS, RSA-3072 with SHA-384 (Intel CSME 15.0); RSASSA-PKCS1-v1.5, RSA-2048 with SHA-256 (Intel CSME 14.0). Signing keys held in Intel HSM; public-key hash hardcoded in CSME boot ROM", "vendor": "intel", "vendor_claims_count": 1, "vendor_name": "Intel", "vulnerabilities": [ "CVE-2019-11090", "CVE-2018-3659" ] }, { "algorithms": [ "TPM_ALG_ECDSA" ], "cbom": "cbom/intel-sgx-tdx-dcap.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": "unknown", "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "SGX/TDX DCAP attestation root (PCK PKI)", "model_id": "sgx-tdx-dcap", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/intel/sgx-tdx-dcap.yaml", "record_class": "adjacent", "record_json": "records/intel-sgx-tdx-dcap.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "active", "tcg_certified": "unknown", "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "intel", "vendor_claims_count": 0, "vendor_name": "Intel", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_HMAC", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/microchip-attpm20p.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "spi" ], "library_revision": "116", "model": "ATTPM20P", "model_id": "attpm20p", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microchip/attpm20p.yaml", "record_class": "tpm", "record_json": "records/microchip-attpm20p.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 6, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "microchip", "vendor_claims_count": 0, "vendor_name": "Microchip Technology", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/microsoft-azure-confidential-vm-vtpm.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Azure Confidential VM vTPM", "model_id": "azure-confidential-vm-vtpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": true, "name": "Azure Confidential VM (AMD SEV-SNP or Intel TDX)", "platform_hardware_root_present": true, "protection_class": "CPU-TEE-bound paravisor vTPM with a hardware-attested AK identity", "tenant_hardware_attestation": true, "vtpm_execution_hardware_isolated": true } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microsoft/azure-confidential-vm-vtpm.yaml", "record_class": "tpm", "record_json": "records/microsoft-azure-confidential-vm-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "unknown", "tcg_certified": "unknown", "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "microsoft", "vendor_claims_count": 0, "vendor_name": "Microsoft", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/microsoft-azure-vtpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": false, "fips": [], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Azure vTPM (Trusted Launch)", "model_id": "azure-vtpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "Trusted Launch", "platform_hardware_root_present": "unknown", "protection_class": "Host-managed secure environment; physical vTPM binding is not publicly documented", "tenant_hardware_attestation": "unknown", "vtpm_execution_hardware_isolated": "unknown" } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microsoft/azure-vtpm.yaml", "record_class": "tpm", "record_json": "records/microsoft-azure-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "microsoft", "vendor_claims_count": 0, "vendor_name": "Microsoft", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_XOR" ], "cbom": "cbom/microsoft-hyper-v-vtpm.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": false, "fips": [ { "cert": "3690", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "4537", "level": 1, "standard": "140-2", "status": "active" }, { "cert": "4686", "level": 1, "standard": "140-2", "status": "active" } ], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Hyper-V vTPM", "model_id": "hyper-v-vtpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "Hyper-V virtual TPM", "platform_hardware_root_present": "unknown", "protection_class": "Host software vTPM; optional VM shielding and host attestation are separate controls", "tenant_hardware_attestation": "unknown", "vtpm_execution_hardware_isolated": false } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microsoft/hyper-v-vtpm.yaml", "record_class": "tpm", "record_json": "records/microsoft-hyper-v-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 9, "status": "active", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 PKCS#1 v1.5 with SHA-256 (Windows Code Integrity / Secure Kernel Code Integrity verification of the module binary)", "vendor": "microsoft", "vendor_claims_count": 0, "vendor_name": "Microsoft", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_CAMELLIA", "TPM_ALG_CMAC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECMQV", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_KDF2", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SM2", "TPM_ALG_XOR" ], "cbom": "cbom/microsoft-ms-tpm-20-ref.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "software", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 183 (spec date 2024-01-25) at pinned tag v1.83r1; no v1.85 code drop published as of 2026-08-07", "model": "ms-tpm-20-ref", "model_id": "ms-tpm-20-ref", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microsoft/ms-tpm-20-ref.yaml", "record_class": "tpm", "record_json": "records/microsoft-ms-tpm-20-ref.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 9, "status": "active", "tcg_certified": "unknown", "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "microsoft", "vendor_claims_count": 0, "vendor_name": "Microsoft", "vulnerabilities": [ "CVE-2023-1017", "CVE-2023-1018", "CVE-2025-2884" ] }, { "algorithms": [], "cbom": "cbom/microsoft-pluton.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "integrated", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Pluton", "model_id": "pluton", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/microsoft/pluton.yaml", "record_class": "tpm", "record_json": "records/microsoft-pluton.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 4, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "microsoft", "vendor_claims_count": 1, "vendor_name": "Microsoft", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/nationz-z32h320tc.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "marketing", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Z32H320TC", "model_id": "z32h320tc", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nationz/z32h320tc.yaml", "record_class": "tpm", "record_json": "records/nationz-z32h320tc.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nationz", "vendor_claims_count": 0, "vendor_name": "NationZ (Nations Technologies)", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDSA", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_RSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512", "TPM_ALG_TDES" ], "cbom": "cbom/nationz-z32h330tc.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "spi" ], "library_revision": "2.0 rev 01.38 (firmware 7.51); earlier engine firmware v1.1 per rev 1.16 Errata 1.5", "model": "Z32H330TC", "model_id": "z32h330tc", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nationz/z32h330tc.yaml", "record_class": "tpm", "record_json": "records/nationz-z32h330tc.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 8, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nationz", "vendor_claims_count": 0, "vendor_name": "NationZ (Nations Technologies)", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384" ], "cbom": "cbom/nsing-ns350.cdx.json", "cc": [ { "eal": "EAL4 augmented with ALC_FLR.1 and AVA_VAN.4 (EAL4+)", "id": "ANSSI-CC-2024/31" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "spi", "i2c" ], "library_revision": "2.0 rev 1.59", "model": "NS350", "model_id": "ns350", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nsing/ns350.yaml", "record_class": "tpm", "record_json": "records/nsing-ns350.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 7, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nsing", "vendor_claims_count": 0, "vendor_name": "NSING Technologies", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/nuvoton-npct42x.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "116 (TPM 1.2 rev 116; TIS 1.21 rev 72)", "model": "NPCT42x", "model_id": "npct42x", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct42x.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct42x.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 6, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/nuvoton-npct5xx.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "unknown", "model": "NPCT5xx", "model_id": "npct5xx", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct5xx.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct5xx.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 7, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_RSASSA", "TPM_ALG_SHA1" ], "cbom": "cbom/nuvoton-npct6xx-tpm12.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2015/14" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [ { "cert": "2439", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "2655", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "116 (TPM 1.2 rev 116)", "model": "NPCT6xx (TPM 1.2)", "model_id": "npct6xx-tpm12", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct6xx-tpm12.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct6xx-tpm12.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 16, "status": "unknown", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 (2048-bit firmware update key)", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256" ], "cbom": "cbom/nuvoton-npct6xx-tpm20.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/15" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2017/55" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "2627", "level": 2, "standard": "140-2", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "1.16", "model": "NPCT6xx (TPM 2.0)", "model_id": "npct6xx-tpm20", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct6xx-tpm20.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct6xx-tpm20.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 14, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 (2048-bit firmware update key)", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [ "CVE-2023-1017" ] }, { "algorithms": [], "cbom": "cbom/nuvoton-npct7xx-tpm12.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/30" } ], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "116 (TPM 1.2 rev 116)", "model": "NPCT7xx (TPM 1.2)", "model_id": "npct7xx-tpm12", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct7xx-tpm12.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct7xx-tpm12.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 19, "status": "active", "tcg_certified": true, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [ "CVE-2021-32015" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_XOR" ], "cbom": "cbom/nuvoton-npct7xx-tpm20.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2017/75" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2018/61" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2020/21" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2021/49 (also /50, /51, /52)" }, { "eal": "EAL4+ (per ST; series certified EAL4+ ALC_DVS.2 ALC_FLR.1 AVA_VAN.4)", "id": "ANSSI-CC-2025/14" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.4)", "id": "EUCC-3090-2026-12/-13/-14 and EUCC-3090-2026-32/-33/-34/-35" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "3187", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "3462", "level": 2, "standard": "140-2", "status": "revoked" }, { "cert": "3933", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "4622", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "4411", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "5057", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "5171", "level": 1, "standard": "140-3", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "spi", "i2c" ], "library_revision": "1.59", "model": "NPCT7xx (TPM 2.0)", "model_id": "npct7xx-tpm20", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/npct7xx-tpm20.yaml", "record_class": "tpm", "record_json": "records/nuvoton-npct7xx-tpm20.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 34, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "ECDSA P-384 with SHA2-256 (384-bit Nuvoton Firmware Update public key installed at manufacturing)", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [ "CVE-2020-25082", "CVE-2025-2884", "CVE-2026-6923" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_RSASSA", "TPM_ALG_SHA1" ], "cbom": "cbom/nuvoton-tpm12-die-fd5c37.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "certification", "family": "1.2", "field_upgradeable": false, "fips": [ { "cert": "2023", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc", "i2c" ], "library_revision": "1.2 (revision not stated)", "model": "TPM 1.2 (die FD5C37, CMVP #2023)", "model_id": "tpm12-die-fd5c37", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/tpm12-die-fd5c37.yaml", "record_class": "tpm", "record_json": "records/nuvoton-tpm12-die-fd5c37.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 3, "status": "unknown", "tcg_certified": false, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/nuvoton-wpct210.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "103 (TPM 1.2 Main rev 103)", "model": "WPCT210", "model_id": "wpct210", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nuvoton/wpct210.yaml", "record_class": "tpm", "record_json": "records/nuvoton-wpct210.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 2, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "nuvoton", "vendor_claims_count": 0, "vendor_name": "Nuvoton Technology", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/nvidia-jetson-ftpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "firmware", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "Jetson fTPM", "model_id": "jetson-ftpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/nvidia/jetson-ftpm.yaml", "record_class": "tpm", "record_json": "records/nvidia-jetson-ftpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 2, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "PKC (public-key cryptography) signing of Jetson boot/QSPI images plus SBK (secure boot key) encryption; the specific PKC algorithm (e.g. RSA vs ECDSA) is not named on this page", "vendor": "nvidia", "vendor_claims_count": 0, "vendor_name": "NVIDIA", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_RSA", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA512", "TPM_ALG_SHAKE128", "TPM_ALG_SHAKE256", "TPM_ALG_SLH_DSA" ], "cbom": "cbom/opentitan-opentitan.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "n/a", "field_upgradeable": true, "fips": [], "form_factor": "adjacent", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "unknown", "model": "OpenTitan", "model_id": "opentitan", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/opentitan/opentitan.yaml", "record_class": "adjacent", "record_json": "records/opentitan-opentitan.json", "record_level": "full", "sha3_acceleration": true, "sources_count": 16, "status": "active", "tcg_certified": false, "tier": "1", "tier_basis": "evidence", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "Hybrid ECDSA P-256 (SHA-256) + SLH-DSA (SPHINCS+); SPHINCS+ verification OTP-gated (CREATOR_SW_CFG_SIGVERIFY_SPX_EN). Manifest v1 (legacy) used RSA-3072 RSASSA-PKCS1-v1_5.", "vendor": "opentitan", "vendor_claims_count": 3, "vendor_name": "OpenTitan (lowRISC)", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/qualcomm-ftpm.cdx.json", "cc": [ { "eal": "EAL2+ (AVA_TEE.2)", "id": "NSCIB-CC-0244671-CR-1.0" } ], "confidence": "low", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "firmware", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "fTPM (Snapdragon)", "model_id": "ftpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/qualcomm/ftpm.yaml", "record_class": "tpm", "record_json": "records/qualcomm-ftpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 2, "status": "active", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "qualcomm", "vendor_claims_count": 0, "vendor_name": "Qualcomm", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KEYEDHASH", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512", "TPM_ALG_SYMCIPHER", "TPM_ALG_XOR" ], "cbom": "cbom/sealsq-qvault-tpm-183.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "I2C up to 1 Mb/s", "SPI up to 33 MHz", "automatic interface detection", "4 GPIOs (NV-index mapped)" ], "library_revision": "1.83", "model": "QVault TPM 183", "model_id": "qvault-tpm-183", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/sealsq/qvault-tpm-183.yaml", "record_class": "tpm", "record_json": "records/sealsq-qvault-tpm-183.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 8, "status": "announced", "tcg_certified": false, "tier": "1", "tier_basis": "announced-claim-based", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+lattice", "update_signature_algorithm": "Hybrid ECC + ML-DSA — two manifest signatures: manifestSignatureECC and manifestSignaturePQC ('signature using the PQC key'). NOTABLE: the classical-only 183 (no PQC algorithms exposed to applications) still authenticates its own firmware updates with a PQC-hybrid signature.", "vendor": "sealsq", "vendor_claims_count": 3, "vendor_name": "SEALSQ (WISeKey)", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HASH_MLDSA", "TPM_ALG_HMAC", "TPM_ALG_KEYEDHASH", "TPM_ALG_MGF1", "TPM_ALG_MLDSA", "TPM_ALG_MLKEM", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_SHA3_512", "TPM_ALG_SHA512", "TPM_ALG_SYMCIPHER", "TPM_ALG_XOR" ], "cbom": "cbom/sealsq-qvault-tpm-185.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": true, "interfaces": [ "I2C up to 1 Mb/s (Standard/Fast/Fast Mode plus; default address 0x2E)", "SPI up to 33 MHz", "automatic interface detection", "4 GPIOs (NV-index mapped)" ], "library_revision": "1.85", "model": "QVault TPM 185", "model_id": "qvault-tpm-185", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/sealsq/qvault-tpm-185.yaml", "record_class": "tpm", "record_json": "records/sealsq-qvault-tpm-185.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 10, "status": "announced", "tcg_certified": false, "tier": "2", "tier_basis": "announced-claim-based", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+lattice", "update_signature_algorithm": "Hybrid ECC + ML-DSA — two manifest signatures over the digest: manifestSignatureECC ('signature using the ECC key') and manifestSignaturePQC ('signature using the PQC key')", "vendor": "sealsq", "vendor_claims_count": 12, "vendor_name": "SEALSQ (WISeKey)", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/sinosun-ssx35.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "SSX35", "model_id": "ssx35", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/sinosun/ssx35.yaml", "record_class": "tpm", "record_json": "records/sinosun-ssx35.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 6, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "sinosun", "vendor_claims_count": 0, "vendor_name": "Sinosun Technology", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/stmicroelectronics-st19np18-tpm-i2c.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "unknown", "model": "ST19NP18-TPM-I2C", "model_id": "st19np18-tpm-i2c", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st19np18-tpm-i2c.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st19np18-tpm-i2c.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "eol", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/stmicroelectronics-st19wp18-tpm.cdx.json", "cc": [ { "eal": "EAL5+ (ALC_DVS.2, AVA_MSU.3, AVA_VLA.4)", "id": "DCSSI-2005/41" } ], "confidence": "medium", "evidence_floor": "marketing", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc", "gpio" ], "library_revision": "unknown", "model": "ST19WP18-TPM", "model_id": "st19wp18-tpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st19wp18-tpm.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st19wp18-tpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 6, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_TDES" ], "cbom": "cbom/stmicroelectronics-st33gtpma.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2019/37" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2021/40" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4304", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "3650", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 1.38 (errata 1.12 for 3.512/6.512)", "model": "ST33GTPMA", "model_id": "st33gtpma", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33gtpma.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33gtpma.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 6, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048-bit product-line key) + SHA-256 chained digests; 384-bit ECC field-upgrade key also provisioned", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_TDES" ], "cbom": "cbom/stmicroelectronics-st33gtpmi.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2019/37" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2021/40" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4304", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "3650", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 1.38 (errata 1.12 for 3.512/6.512)", "model": "ST33GTPMI", "model_id": "st33gtpmi", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33gtpmi.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33gtpmi.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 5, "status": "nrnd", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048-bit product-line key) + SHA-256 chained digests; 384-bit ECC field-upgrade key also provisioned", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_ECDSA", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384" ], "cbom": "cbom/stmicroelectronics-st33ktpm-idevid.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4702 (base product)", "level": 1, "standard": "140-3", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "SPI up to 66 MHz", "I2C up to 1 Mb/s" ], "library_revision": "2.0 rev 1.59 errata 1.5; PTP 1.05", "model": "ST33KTPM-IDevID", "model_id": "st33ktpm-idevid", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33ktpm-idevid.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33ktpm-idevid.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "active", "tcg_certified": true, "tier": "1", "tier_basis": "evidence", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "unknown", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_EDDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_LMS", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_SHA512" ], "cbom": "cbom/stmicroelectronics-st33ktpm2i.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2024/05" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2024/38" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4737", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "5103", "level": 2, "standard": "140-3", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "SPI up to 48 MHz", "I2C up to 1 MHz (exclusive configurations)" ], "library_revision": "2.0 rev 1.59 (errata 1.4 per product page/ST; errata 1.5 per TCG listing of FW 10.512)", "model": "ST33KTPM2I", "model_id": "st33ktpm2i", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33ktpm2i.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33ktpm2i.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 14, "status": "active", "tcg_certified": true, "tier": "2", "tier_basis": "claim-assisted", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "ECDSA NIST P-384 with SHA-384 (FW 10.257); ECDSA P-384 + LMS SP 800-208 dual signature from FW 10.512", "vendor": "stmicroelectronics", "vendor_claims_count": 3, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_LMS", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_SHA512" ], "cbom": "cbom/stmicroelectronics-st33ktpm2x.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2023/08" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2024/04" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2025/10" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.2, AVA_VAN.5), assurance level High", "id": "EUCC-3090-2026-64" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4702", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "4737", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "5109", "level": 2, "standard": "140-3", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "SPI up to 66 MHz", "I2C up to 1 Mb/s (dynamically selected)" ], "library_revision": "2.0 rev 1.59 errata 1.5 (current FW); rev 1.59 errata 1.3/1.4 for FW 9.256/9.257-9.258", "model": "ST33KTPM2X", "model_id": "st33ktpm2x", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33ktpm2x.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33ktpm2x.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 19, "status": "active", "tcg_certified": true, "tier": "2", "tier_basis": "claim-assisted", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "ECDSA NIST P-384 with SHA-384 (FW 9.256-9.258); ECDSA P-384 + LMS SP 800-208 dual signature from FW 9.512", "vendor": "stmicroelectronics", "vendor_claims_count": 4, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_TDES" ], "cbom": "cbom/stmicroelectronics-st33tphf20.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/33" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/79" }, { "eal": "EAL4+ (ALC_FLR.1)", "id": "ANSSI-CC-2017/40" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2018/42" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/54" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/46" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "3682", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3004", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3065", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3323", "level": 2, "standard": "140-2", "status": "historical" }, { "cert": "3684", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 1.38 (FW 74.08+); rev 1.16 (FW 72.00-74.21)", "model": "ST33TPHF20", "model_id": "st33tphf20", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tphf20.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tphf20.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 10, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048-bit field-upgrade RSA verification key) on first blob + SHA-256 chained digests on subsequent blobs", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [ "CVE-2019-16863" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_RSA", "TPM_ALG_SHA1" ], "cbom": "cbom/stmicroelectronics-st33tphf2e-tpm12.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/44" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/77" }, { "eal": "EAL4+ (ALC_FLR.1)", "id": "ANSSI-CC-2017/38" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2018/39" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/52" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/44" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2020/28" } ], "confidence": "medium", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "1.2 rev 116", "model": "ST33TPHF2E (TPM 1.2)", "model_id": "st33tphf2e-tpm12", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tphf2e-tpm12.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tphf2e-tpm12.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 10, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048) + SHA-256 chained digests (family mechanism)", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [ "CVE-2019-16863" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_TDES" ], "cbom": "cbom/stmicroelectronics-st33tphf2e-tpm20.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/43" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2016/78" }, { "eal": "EAL4+ (ALC_FLR.1)", "id": "ANSSI-CC-2017/39" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2018/41" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/53" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2019/45" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2020/40" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "3681", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "2795", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "2922", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "3066", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "3302", "level": 1, "standard": "140-2", "status": "historical" }, { "cert": "3680", "level": 1, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 1.38 (FW 73.08+); rev 1.16 (71.00-73.21)", "model": "ST33TPHF2E (TPM 2.0)", "model_id": "st33tphf2e-tpm20", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tphf2e-tpm20.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tphf2e-tpm20.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 10, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048-bit field-upgrade RSA verification key) on first blob + SHA-256 chained digests on subsequent blobs", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [ "CVE-2019-16863" ] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_TDES" ], "cbom": "cbom/stmicroelectronics-st33tphf2x.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2019/37" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2021/40" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2022/48" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4304", "level": 2, "standard": "140-2", "status": "active" }, { "cert": "3650", "level": 2, "standard": "140-2", "status": "historical" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 1.59 (FW 1.768+); rev 1.38 (1.256-2.512)", "model": "ST33TPHF2X", "model_id": "st33tphf2x", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tphf2x.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tphf2x.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 7, "status": "active", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PSS (2048-bit product-line key) on first blob + SHA-256 chained digests; module also stores a 384-bit ECC field-upgrade verification key", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_RSASSA", "TPM_ALG_SHA1" ], "cbom": "cbom/stmicroelectronics-st33tpm12.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2012/29" }, { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2012/84" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "TPM 1.2 Level 2 rev 116", "model": "ST33TPM12", "model_id": "st33tpm12", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tpm12.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tpm12.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 15, "status": "eol", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSASSA-PKCS1-v1.5 with RSA-2048 and SHA-1", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_HMAC", "TPM_ALG_MGF1", "TPM_ALG_RSA", "TPM_ALG_RSASSA", "TPM_ALG_SHA1" ], "cbom": "cbom/stmicroelectronics-st33tpmf2espi.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_FLR.1, AVA_VAN.4)", "id": "ANSSI-CC-2015/80" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": true, "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "spi" ], "library_revision": "TPM 1.2 Level 2 rev 116", "model": "ST33TPMF2ESPI", "model_id": "st33tpmf2espi", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/st33tpmf2espi.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-st33tpmf2espi.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 8, "status": "unknown", "tcg_certified": true, "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 signature over SHA-256 digest (vendor signing key held in CC-certified HSM)", "vendor": "stmicroelectronics", "vendor_claims_count": 0, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_LMS", "TPM_ALG_OAEP", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA3_256", "TPM_ALG_SHA3_384", "TPM_ALG_SHA512" ], "cbom": "cbom/stmicroelectronics-stsafe-v100-tpm.cdx.json", "cc": [ { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2024/05" }, { "eal": "EAL4+ (ALC_DVS.2, ALC_FLR.1, AVA_VAN.5)", "id": "ANSSI-CC-2024/38" } ], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": true, "fips": [ { "cert": "4737", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "5103", "level": 2, "standard": "140-3", "status": "active" } ], "form_factor": "discrete", "implements_v185_pqc_commands": false, "interfaces": [ "SPI up to 48 MHz", "I2C up to 1 MHz (exclusive configurations)" ], "library_revision": "2.0 rev 1.59 (errata 1.4 per product page/ST; errata 1.5 per TCG listing of FW 10.512)", "model": "STSAFE-V100-TPM", "model_id": "stsafe-v100-tpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/stmicroelectronics/stsafe-v100-tpm.yaml", "record_class": "tpm", "record_json": "records/stmicroelectronics-stsafe-v100-tpm.json", "record_level": "full", "sha3_acceleration": false, "sources_count": 15, "status": "active", "tcg_certified": true, "tier": "2", "tier_basis": "claim-assisted", "update_pqc_protected": true, "update_pqc_scheme_class": "hybrid-classical+hash-based", "update_signature_algorithm": "ECDSA NIST P-384 with SHA-384 (FW 10.257); ECDSA P-384 + LMS SP 800-208 dual signature from FW 10.512", "vendor": "stmicroelectronics", "vendor_claims_count": 3, "vendor_name": "STMicroelectronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_CAMELLIA", "TPM_ALG_CMAC", "TPM_ALG_ECDAA", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_ECMQV", "TPM_ALG_ECSCHNORR", "TPM_ALG_HMAC", "TPM_ALG_KDF1_SP800_108", "TPM_ALG_KDF1_SP800_56A", "TPM_ALG_KDF2", "TPM_ALG_MGF1", "TPM_ALG_OAEP", "TPM_ALG_RSA", "TPM_ALG_RSAES", "TPM_ALG_RSAPSS", "TPM_ALG_RSASSA", "TPM_ALG_SHA1", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_SHA512", "TPM_ALG_SM2", "TPM_ALG_TDES", "TPM_ALG_XOR" ], "cbom": "cbom/swtpm-swtpm.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "software", "implements_v185_pqc_commands": false, "interfaces": "unknown", "library_revision": "2.0 rev 183 (libtpms v0.10.x; rev 164 at v0.9.x); TPM 1.2 also emulated", "model": "swtpm", "model_id": "swtpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/swtpm/swtpm.yaml", "record_class": "tpm", "record_json": "records/swtpm-swtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 16, "status": "active", "tcg_certified": "unknown", "tier": "0", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 OpenPGP detached signature (SHA-256 digest on swtpm v0.10.1; SHA-512 on libtpms v0.10.2); signer key fingerprint B818B9CADF9089C2D5CEC66B75AD65802A0B4211", "vendor": "swtpm", "vendor_claims_count": 0, "vendor_name": "swtpm project", "vulnerabilities": [ "CVE-2026-21444", "CVE-2025-49133", "CVE-2023-1017", "CVE-2023-1018", "CVE-2022-23645", "CVE-2020-28407" ] }, { "algorithms": [], "cbom": "cbom/vmware-vsphere-vtpm.cdx.json", "cc": [], "confidence": "medium", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [], "form_factor": "virtual", "implements_v185_pqc_commands": "unknown", "interfaces": "unknown", "library_revision": "unknown", "model": "vSphere vTPM", "model_id": "vsphere-vtpm", "platform_trust_profiles": [ { "dedicated_physical_tpm_per_vm": false, "hardware_report_binds_vtpm_identity": "unknown", "name": "vSphere vTPM", "platform_hardware_root_present": "unknown", "protection_class": "Software vTPM with VM-encrypted persistent state", "tenant_hardware_attestation": false, "vtpm_execution_hardware_isolated": false } ], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/vmware/vsphere-vtpm.yaml", "record_class": "tpm", "record_json": "records/vmware-vsphere-vtpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 3, "status": "unknown", "tcg_certified": "unknown", "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "vmware", "vendor_claims_count": 0, "vendor_name": "VMware (by Broadcom)", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/winbond-wpct200.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "lpc" ], "library_revision": "1.2 (TIS 1.2; Main spec revision not stated in any fetched source)", "model": "WPCT200", "model_id": "wpct200", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/winbond/wpct200.yaml", "record_class": "tpm", "record_json": "records/winbond-wpct200.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "winbond", "vendor_claims_count": 0, "vendor_name": "Winbond Electronics", "vulnerabilities": [] }, { "algorithms": [], "cbom": "cbom/winbond-wpct301.cdx.json", "cc": [], "confidence": "low", "evidence_floor": "datasheet", "family": "1.2", "field_upgradeable": "unknown", "fips": [], "form_factor": "discrete", "implements_v185_pqc_commands": "unknown", "interfaces": [ "i2c" ], "library_revision": "1.2 (TIS 1.2 base; Main spec revision not stated in fetched sources)", "model": "WPCT301", "model_id": "wpct301", "platform_trust_profiles": [], "pqc_exposed_algorithms": [], "pqc_parameter_sets": [], "record": "data/tpm/winbond/wpct301.yaml", "record_class": "tpm", "record_json": "records/winbond-wpct301.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 5, "status": "unknown", "tcg_certified": false, "tier": "unknown", "tier_basis": "evidence", "update_pqc_protected": "unknown", "update_pqc_scheme_class": null, "update_signature_algorithm": "unknown", "vendor": "winbond", "vendor_claims_count": 0, "vendor_name": "Winbond Electronics", "vulnerabilities": [] }, { "algorithms": [ "TPM_ALG_AES", "TPM_ALG_ECDH", "TPM_ALG_ECDSA", "TPM_ALG_HMAC", "TPM_ALG_MLDSA", "TPM_ALG_MLKEM", "TPM_ALG_RSA", "TPM_ALG_SHA256", "TPM_ALG_SHA384", "TPM_ALG_XOR" ], "cbom": "cbom/wolfssl-wolftpm.cdx.json", "cc": [], "confidence": "high", "evidence_floor": "datasheet", "family": "2.0", "field_upgradeable": "unknown", "fips": [ { "cert": "4718", "level": 1, "standard": "140-3", "status": "active" }, { "cert": "5041", "level": 1, "standard": "140-3", "status": "active" } ], "form_factor": "software", "implements_v185_pqc_commands": true, "interfaces": "unknown", "library_revision": "fwTPM implements TPM 2.0 rev 1.38 command set (105/113) plus the v1.85 PQC command subset at v4.1.0; client stack tracks v1.85", "model": "wolfTPM", "model_id": "wolftpm", "platform_trust_profiles": [], "pqc_exposed_algorithms": [ "TPM_ALG_MLDSA", "TPM_ALG_MLKEM" ], "pqc_parameter_sets": [ "ML-DSA-44", "ML-DSA-65", "ML-DSA-87", "ML-KEM-1024", "ML-KEM-512", "ML-KEM-768" ], "record": "data/tpm/wolfssl/wolftpm.yaml", "record_class": "tpm", "record_json": "records/wolfssl-wolftpm.json", "record_level": "full", "sha3_acceleration": "unknown", "sources_count": 15, "status": "active", "tcg_certified": "unknown", "tier": "3", "tier_basis": "evidence", "update_pqc_protected": false, "update_pqc_scheme_class": null, "update_signature_algorithm": "RSA-2048 with SHA-256 (OpenPGP detached signature over release tarball)", "vendor": "wolfssl", "vendor_claims_count": 3, "vendor_name": "wolfSSL", "vulnerabilities": [ "CVE-2025-7844" ] } ] }