Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A TPM hardware device has very limited non-volatile protected memory just sufficient to store the EK (Endorsement Key) and SRK (Storage Root Key). How does a TPM allow nearly unlimited number of symmetric keys to be safely stored on an otherwise very vulnerable HDD?

share|improve this question
up vote 10 down vote accepted

The Storage Root Key (SRK) is used to wrap TPM protected keys which can be stored outside the TPM. That data stored outside the TPM can be decrypted by passing it back through the TPM again for a decryption operation.

Keys wrapped by the SRK can themselves be used to wrap other keys, too. This method of wrapping can be used to create a key hierarchy of parent key and child keys. To load a child, first load its parent. Once the child is loaded, the parent key can be unloaded from the TPM to free up TPM chip resources.

share|improve this answer

The safety of the TPM storage is based on two factors:

  • There is no hardware API for retrieving the private keys.
    Under no circumstances will the key be transmitted to the host
  • Tamper-resistent hardware.
    Countermeasures such as permanently sealing the chip in resin help prevent physical hacking. In most cases, there is a high probability that you will break the chip if you attempt to gain direct physical access.

In the end, though, no storage medium is 100% secure. This is about increasing the cost and decreasing the probability of a physical breach.

share|improve this answer
How does this answer the question? – SquareRootOfTwentyThree Sep 11 '12 at 19:32

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.