STMicroelectronics Boosts Consumer Data Security

GENEVA, Oct. 19, 2011 /PRNewswire/ -- The cost of protecting confidentiality and secret information stored on PCs and laptops - and the costs that a commercial enterprise or Government department may have to pay when a laptop containing sensitive information is lost or stolen - will be dramatically reduced by a unique new device announced today by STMicroelectronics (NYSE: STM), a global semiconductor leader serving customers across the spectrum of electronics applications and a world leader in security technologies.  Called HardCache-SL3/PC, the new device is a single-chip data encryption engine that is the first in the world to include a cryptographic module certified to the United States NIST(1) (National Institute of Standards and Technology) FIPS 140-2 Level 3 standard, the most rigorous security standard anywhere in the world for non-military applications.

FIPS (Federal Information Processing Standard) 140-2 is a U.S. Government standard that specifies requirements for cryptographic modules. Initially developed for use by US Government departments and agencies, FIPS 140-2 is fast becoming a de facto standard, both nationally and internationally, and is the model for the International Security Standard ISO 19790 currently being developed. The growing importance of these standards is due to the increasing damage individuals and businesses suffer as a result of the loss and disclosure of sensitive and confidential information. In addition, a proliferation of new laws around the world require enhanced security and privacy while raising the legal and financial stakes for enterprises that fail to meet the standards.

"HardCache-SL3/PC sets a new reference level for the industry by providing a solution certified by NIST for its highest non-military level of security, that is accessible to a broader audience, thanks to its affordable cost," said Francesco Brianti, Vice President Open Market Business Unit. "ST has a long history of providing best-in-class security solutions to our customers, illustrated by our strong positions in the supply of Trusted Platform Modules, Smart Cards and secure features in Set-Top Box systems. We are now able to bring this depth of expertise to the secure computer market with the world's first FIPS 140-2 Level 3 certified encryption chip."

Until now, the cost of complying with Level 3 was so high that very few computer and data storage manufacturers could afford it. As a result, most "secure computers" employed software solutions that could not go beyond Level 2 but worse, also slowed the performance of the computer. The HardCache-SL3/PC eliminates these problems because the hard-wired encryption engine embedded within the chip performs all of the encryption and decryption algorithms that are needed each time the system retrieves data stored from the memory to the central processor with no impact to performance.

The HardCache-SL3/PC is fully supported by software drivers and a development kit to lower the cost of developing new secure applications.

Please contact your ST sales office for pricing options and sample requests, or visit the following URL to order from distributors: http://www.st.com/internet/com/ordering/buy_from_distributors.jsp

Notes for Editors

(1) FIPS 140-2 certification is only achievable via the Cryptographic Module Validation Program (CMVP) which is jointly supported by NIST and the Canadian government's Communications Security Establishment (CSE). Within FIPS 140-2, there are four defined security levels. ST's HardCache-SL3 is targeted for Security Level 3.

(2) Level 3 includes requirements for physical tamper-resistance (making it difficult for attackers to gain access to sensitive information contained in the module) and identity-based authentication, and for a physical or logical separation between the interfaces by which "critical security parameters" enter and leave the module, and its other interfaces.

(3) In addition to all US federal agencies, the established market for FIPS F140-2 products includes postal authorities, financial institutions, healthcare providers and other private enterprises.

(4) Privacy Rights Clearing House has reported (August 2010) that the total number of records containing sensitive personal information involved in "reported" security breaches has exceeded 500 million since January 2005.

About STMicroelectronics

STMicroelectronics is a global leader serving customers across the spectrum of electronics applications with innovative semiconductor solutions. ST aims to be the undisputed leader in multimedia convergence and power applications leveraging its vast array of technologies, design expertise and combination of intellectual property portfolio, strategic partnerships and manufacturing strength. In 2010, the Company's net revenues were $10.35 billion. Further information on ST can be found at www.st.com. 

(1) NIST certificate available at the following link:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401val2011.htm

SOURCE STMicroelectronics