PR No. P1447M STMicroelectronics Enters Trusted Platform Market with Complete TCG 1.2 Solution New secure Trusted Platform Module benefits from ST's security expertise, and is backward compatible with the existing Trusted Computing Group 1.1b standard Geneva, April 28, 2004 - STMicroelectronics (NYSE: STM) announces the introduction of a personal computer security solution meeting the Trusted Computing Group (TCG) 1.2 specification, which was published in November 2003. The TCG is a broad alliance of major hardware and software companies which aims to create more secure computing environments through the use of hardware building blocks and cross-platform software interfaces, without compromising functional integrity, privacy or individual rights. The need for trusted computing has come about due to the increasing vulnerability to both physical and electronic attack of personal computers in general, and of laptop computers and other portable devices in particular. The concept is expected to be used in the majority of new computers within the next few years, based on TCG specifications; it allows validation of both the computer and its user, and provides secure storage for critical data and passwords. It can verify that a ‘trusted process' should run, and establish ‘trusted relationships' with other computers to reduce opportunities for viruses and other attacks. The basis of ST's solution is a single-chip Trusted Platform Module (TPM) - the ST19WP18 - a fully featured microcomputer in the company's ST19W family of security-proven MCUs dedicated to smart card and other secure applications, with an advanced cryptographic coprocessor supporting PKI (Public Key Infrastructure) functionalities. It includes a 33 MHz Intel-compliant LPC (Low Pin Count) Interface as recommended by TCG PC Client Specific TPM Implementation Specification (TIS) for communication with the host processor. Development of the ST19WP18 is backed by more than 20 years experience in the design of silicon products to the highest levels of security. ST is a major manufacturer for the smart card market, and is the number one supplier of secure ICs to the financial sector for card applications. Over the years it has evolved a ‘security culture' across design and manufacturing functions, in addition to meeting the stringent requirements of formal security certification. The ST19WP18-TPM is based on an 8-bit CPU architecture with embeded set of memories (ROM, RAM & EEPROM NVM) and state-of-the-art security features. A 1088-bit Modular Arithmetic Processor (MAP) is designed to speed up cryptographic calculations using Public Key Algorithms. Currently the ST19WP18-TPM solution includes software layers providing support for Windows® 2000/XP operating systems drivers, and MA (Memory.Absent) and MP (Memory.Present) BIOS drivers. Through dedicated partnerships ST will also provide additional software modules covering complementary software layers, fully compliant with the TCG Software Stack (TSS) specification. The TSS specification - released by the TCG in September 2003 - defines a standard software interface for accessing TPM functions to facilitate application development and interoperability across platforms. This interoperability is provided through a TCGEnabled CSP (Cryptographic Service Provider) being compliant with either PKCS#11 (Public-Key Cryptography Standards) standard1 or the MS CAPI (Microsoft's crypto API) specification. ST's TPM solution will be completed with a dedicated management tool enabling an easy and trouble-free set up and configuration of the TPM. The package offers PC manufacturers a complete solution for implementing TCG security in their products. The ST19WP18-TPM is backward compatible with the earlier 1.1b specification already used on motherboards by some leading PC manufacturers. The fully compliant 1.1b embedded firmware supports features like cryptographic key generation, integrity metrics and secure storage. In addition, the device is TCG v1.2 ready and provides support for the new functions such as Delegation, Transport Protection and Locality. The firmware relies on an optimized and flexible software architecture which provides for the integration of future TCG enhancements and the implementation of dedicated functions. Prototypes of the ST19WP18-TPM packaged in TSSOP28 will be available in Q2 04, with production planned for the second half of 2004. Pricing is $4 in quantities of 10k units. About the Trusted Computing Group The Trusted Computing Group (TCG) is a not-for-profit organization - of which ST is one of around 45 members - which exists to develop and promote open standards for hardwareenabled trusted computing and security technologies, including hardware building blocks and software interfaces, across multiple platforms, peripherals and devices. Its primary goal is to help users protect their information assets such as data, passwords and keys from compromise due to software attack and physical theft. The Group was formed as a successor to the Trusted Computing Platform Alliance (TCPA), which was founded in 1999 by Compaq, HP, IBM, Intel and Microsoft. TCG has adopted the existing TCPA specifications, including the Main (TPM 1.1) specification, and PC Specific Implementation specification. A TSS (TCG Software Stack) specification was announced on September 15, 2003, and the TPM 1.2 specification on November 5, 2003. Work groups have been formed for server, PDA, and digital phone implementation specifications. Further information is available at www.trustedcomputinggroup.org About STMicroelectronics STMicroelectronics is a global leader in developing and delivering semiconductor solutions across the spectrum of microelectronics applications. An unrivalled combination of silicon and system expertise, manufacturing strength, Intellectual Property (IP) portfolio and strategic partners positions the Company at the forefront of System-on-Chip (SoC) technology and its products play a key role in enabling today's convergence markets. The Company's shares are traded on the New York Stock Exchange, on Euronext Paris and on the Milan Stock Exchange. In 2003, the Company's net revenues were $7.24 billion and net earnings were $253 million. Further information on ST can be found at www.st.com. 1 The Public-Key Cryptography Standards are specifications produced by RSA Laboratories in cooperation with secure systems developers worldwide for the purpose of accelerating the deployment of public-key cryptography. Standard #11 is the Cryptographic Token Interface Standard.