Infineon Technologies SLB9655TT12FW432NXUMA1

Overview

SLB9655TT12FW432NXUMA1 from Infineon Technologies is a Trusted Platform Module (TPM) 2.0-compliant security IC implementing ISO/IEC 11889 and TCG standards. It integrates a FIPS 140-2 Level 3 certified cryptographic engine, supports RSA-2048/ECC-256 asymmetric operations, and features 128 KB of secure flash for key storage and firmware. It is deployed in server motherboards and industrial PCs for hardware-rooted boot integrity verification.

For engineers reviewing the SLB9655TT12FW432NXUMA1 datasheet, SLB9655TT12FW432NXUMA1 pinout, SLB9655TT12FW432NXUMA1 application, or SLB9655TT12FW432NXUMA1 equivalent, key selection criteria include TPM 2.0 compliance level, cryptographic acceleration support, secure non-volatile memory size, and SPI/I²C interface timing compatibility with host platform firmware.

Technical Context

This TPM 2.0 device implements a dedicated ARM SecurCore SC300 CPU with on-die ROM-based bootloader and hardened SRAM for runtime secrets. It executes cryptographic operations-including SHA-256, HMAC, RSA signing, and ECDH key exchange-within a tamper-resistant boundary meeting Common Criteria EAL4+ certification requirements.

The IC interfaces exclusively via SPI (up to 40 MHz) and I²C (up to 1 MHz), with configurable reset behavior and hardware-based locality support for platform firmware interaction. Its internal TRNG meets NIST SP 800-90B requirements and feeds all key generation processes.

Key Specifications

Pinout & Package

SLB9655TT12FW432NXUMA1 is housed in a 5 mm × 5 mm × 1.0 mm 32-pin QFN package with exposed thermal pad (RoHS-compliant, lead-free).

Key Features

Applications

Equivalent & Alternatives

The following parts are listed as comparable options for similar TPM 2.0 security applications.

Compared with SLB9655TT12FW432NXUMA1, ST33TPHF2ESAB2 offers reduced memory and interface flexibility but lower BOM cost, while ATTPM20-MA1 provides eSPI-native integration at the expense of legacy bus compatibility-making the Infineon part optimal for dual-interface industrial and server designs requiring field-upgradeable firmware and multi-protocol host support.

Availability

SLB9655TT12FW432NXUMA1 is available at Aetrix Electronics and suitable for server motherboard design, industrial PLC security upgrades, and medical imaging system certification requiring stable component supply and long-term lifecycle assurance.

Supply support for SLB9655TT12FW432NXUMA1 includes scheduled delivery planning, volume procurement assistance, BOM continuity management, traceable sourcing, and lifecycle availability coordination for OEM customers, industrial embedded developers, connected-device designers, and electronics production programs.

Manufacturer

Infineon Technologies is a German semiconductor manufacturer specializing in power management, automotive microcontrollers, and hardware security solutions.

The SLB9655 series belongs to Infineon's OPTIGA™ TPM product line, engineered specifically for enterprise-grade hardware-rooted trust in servers, industrial automation, and regulated medical devices.

FAQ

What security certifications does SLB9655TT12FW432NXUMA1 hold?

SLB9655TT12FW432NXUMA1 is certified to Common Criteria EAL4+ (AVB_VAN.5, ALC_FLR.3) and FIPS 140-2 Level 3. It meets ISO/IEC 11889:2015 TPM 2.0 requirements and has undergone independent lab validation for side-channel resistance, fault injection resilience, and physical tamper detection. Certification reports are publicly available via Infineon's product documentation portal.

Does this TPM support firmware updates over the SPI interface?

Yes, SLB9655TT12FW432NXUMA1 supports authenticated and encrypted firmware updates via SPI using ECDSA-signed images and AES-128-GCM decryption. Updates require valid signature verification against the device's immutable root key and pass integrity checks before flashing. The process preserves existing PCR values and secure key slots unless explicitly overwritten.

Can SLB9655TT12FW432NXUMA1 operate with both 3.3 V SPI and 1.8 V I²C signaling?

No. Both VDD and VDDIO must be supplied at 3.3 V ±10%. While the I²C interface operates at 3.3 V logic levels, it is not 1.8 V tolerant. Pull-up resistors on SCL/SDA must connect to VDDIO (3.3 V), and host I²C controllers must comply with 3.3 V open-drain specifications per Infineon's electrical characteristics table.

Is the secure flash memory accessible for customer-defined key storage?

Yes, 128 KB of secure flash includes user-configurable NV indices defined via TPM2_NV_DefineSpace. Customers may allocate space for custom keys, certificates, or configuration data, subject to authorization policies (e.g., password, policy session, or platform hierarchy). Access is enforced by TPM command-level authorization and cannot be bypassed via physical probing.