This mechanism counters the threat of firmware corruption by attackers with access to quantum computers and increases the device's long-term survivability by enabling a quantum-resistant firmware update path. The standardized, out-of-the-box TPM provides a solid foundation for securely establishing the identity and state of software on PCs, servers, and connected devices, and for protecting the integrity and confidentiality of data at rest and in transit.
Infineon's latest addition to the OPTIGA TPM family is the industry's first TPM to offer a firmware update mechanism with a 256-bit key length, along with additional PQC-based verification. With this robust and reliable update mechanism, the OPTIGA TPM SLB 9672 can continue to be updated even if standard algorithms become unreliable. Its design is intended to improve computing performance with fail-safe features that counteract the effects of corrupted firmware. For example, the built-in fail-safe features allow for TPM firmware recovery in accordance with the NIST SP 800-193 platform firmware resilience guidelines.
This TPM also offers expanded non-volatile memory to store new features, such as certificates and additional cryptographic keys. Security assessment and certification are performed by independent bodies in accordance with Common Criteria and FIPS requirements. The new TPM also fully complies with the Trusted Computing Group (TCG) requirements (TPM 2.0 standard version 1.59) and is certified to the latest TPM 2.0 standard.
With a standardized trust base, as well as various tools to support design activities (software/demo boards), this TPM enables easy integration with host software. It is also compatible with the latest versions of Windows and Linux. Furthermore, the chip features an extended operating temperature range from -40°C to 105°C. Infineon is committed to the long-term availability of the OPTIGA TPM SLB 9672 for a minimum of ten years and offers tailored support and maintenance through the Infineon Security Partner Network (ISPN).
