PRODUCTS

• Provides all TPM 2.0 API’s in compliance with the specification.
• Backward API compatibility.
• Includes wrappers for the most common use cases, like Key Generation, NV memory, RSA encrypt/decrypt, ECC sign/verify, ECDH, and others.
• Provides examples for the advanced use cases, like Attestation (TPM 2.0 Quote), Certificate Signing Request (CSR), generation of signed timestamp (TPM 2.0 GetTime), and others.
• Native support for Microsoft Windows and Linux, and can work as part of an RTOS application or firmware.

• Native C code designed for embedded use.
• Single IO callback for hardware SPI interface.
• No external dependencies.
• Compact code size and minimal memory use.

What is a Trusted Platform Module (TPM)?

Trusted Platform Module (TPM, also known as ISO/IEC 11889) is a standardized secure processor that lives as a dedicated microcontroller alongside the main processor(MCU, CPU or SoC). TPM can be found in almost any modern computer systems. Computer programs can use a TPM to authenticate hardware devices, since each TPM chip has a unique and secret RSA key burned in as it is produced. Applications can protect their keys and secrets using the TPM as a vault.

Platform and Language Support

wolfTPM is built for maximum portability and is generally very easy to compile on new platforms.  If your desired platform is not listed under the supported operating environments, please contact us.

wolfTPM supports the C programming language as a primary interface. If you have interest in using wolfTPM in another programming language that it does not currently supported, please contact us.

Commercial Support

Support packages for wolfTPM are available on an annual basis directly from wolfSSL.  With three different package options, you can compare them side-by-side and choose the package that best fits your specific needs.  Please see our Support Packages page for more details or contact us with any questions.

wolfSSL Training Course

Interested in getting trained by security experts on subjects related to wolfSSL and SSL/TLS?  Learn more.

Features

• Provides all TPM 2.0 API’s in compliance with the specification.
• Wrappers provided to simplify Key Generation/Loading, RSA encrypt/decrypt, ECC sign/verify, ECDH, NV, Hashing/HACM, AES, Sealing/Unsealing, Attestation, PCR Extend/Quote and Secure Root of Trust.
• Uses the TPM Interface Specification (TIS) to communicate over SPI.
• Can also use the Linux TPM kernel interface (/dev/tpmX) to talk with any physical TPM on SPI, I2C and even LPC bus.
• Platform support for Raspberry Pi, STM32 with CubeMX, Atmel ASF, Xilinx, Infineon TriCore and Barebox.
• Design allows for easy portability to different platforms:
• Native C code designed for embedded use.
• Single IO callback for hardware SPI interface.
• No external dependencies.
• Compact code size and minimal memory use.
• Includes example code for:
  • Most TPM2 native API’s
  • All TPM2 wrapper API's
  • PKCS 7
  • Certificate Signing Request (CSR)
  • TLS Client
  • TLS Server
  • Use of the TPM's Non-volatile memory
  • Attestation (activate and make credential)
  • Benchmarking TPM algorithms and TLS
  • Key Generation (primary, RSA/ECC and symmetric), loading and storing to flash (NV memory)
  • Sealing and Unsealing data with an RSA key
  • Time signed or set
  • PCR read/reset
  • GPIO configure, read and write.
  • Secure boot, root of trust
• Parameter encryption support using AES-CFB or XOR.
• Support for salted unbound authenticated sessions.
• Support for HMAC Sessions.
• Testing done using the following TPM 2.0 modules:
  • Infineon OPTIGA (TM) SLB9670 and SLB9672.
  • STMicro STSAFE-TPM ST33TPHF2XSPI/2XI2C and ST33KTPM2X
  • Microchip ATTPM20
  • Nuvoton NPCT65X and NPCT75x
  • Nations Tech Z32H330TC