diff --git a/group/tf-l1-build-plat/stm32mp1-mp13-tbb-decrypt:nil b/group/tf-l1-build-plat/stm32mp1-mp13-tbb-decrypt:nil
new file mode 100644
index 0000000..0849ee7
--- /dev/null
+++ b/group/tf-l1-build-plat/stm32mp1-mp13-tbb-decrypt:nil
@@ -0,0 +1,6 @@
+#
+# Copyright (c) 2022 Arm Limited. All rights reserved.
+#
+# SPDX-License-Identifier: BSD-3-Clause
+#
+
diff --git a/script/tf-coverity/tf-cov-make b/script/tf-coverity/tf-cov-make
index a06d8ff..7a139fd 100755
--- a/script/tf-coverity/tf-cov-make
+++ b/script/tf-coverity/tf-cov-make
@@ -631,6 +631,12 @@
     MBEDTLS_DIR=$(pwd)/mbedtls TRUSTED_BOARD_BOOT=1 \
     BUILD_PLAT=build/stm32mp1-mp13-sdmmc-tbbr/debug bl2
 
+# STM32MP13 TBBR DECRYPTION AES GCM
+make $(stm32mp13_common_flags) STM32MP_SDMMC=1 \
+    MBEDTLS_DIR=$(pwd)/mbedtls TRUSTED_BOARD_BOOT=1 \
+    DECRYPTION_SUPPORT=aes_gcm ENCRYPT_BL32=1 \
+    BUILD_PLAT=build/stm32mp1-mp13-sdmmc-tbbr-dec/debug bl2
+
 # Platforms from TI
 make PLAT=k3 $(common_flags) all
 make PLAT=k3 TARGET_BOARD=j784s4 $(common_flags) all
diff --git a/tf_config/stm32mp1-mp13-tbb-decrypt b/tf_config/stm32mp1-mp13-tbb-decrypt
new file mode 100644
index 0000000..9755e40
--- /dev/null
+++ b/tf_config/stm32mp1-mp13-tbb-decrypt
@@ -0,0 +1,12 @@
+AARCH32_SP=optee
+ARCH=aarch32
+ARM_ARCH_MAJOR=7
+CROSS_COMPILE=arm-none-eabi-
+DECRYPTION_SUPPORT=aes_gcm
+DTB_FILE_NAME=stm32mp135f-dk.dtb
+ENCRYPT_BL32=1
+PLAT=stm32mp1
+STM32MP13=1
+STM32MP_EMMC=1
+STM32MP_SDMMC=1
+TRUSTED_BOARD_BOOT=1