Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have not been able to find any information about trusted computing on the Internet. I am reasonably sure that its software manifestation can be bypassed by a Linux live disk, but what about hardware versions?

share|improve this question
3  
Welcome to IT Security. I'm having trouble discerning what your question is. We have some rules on StackExchange about question clarity and quality, which you can read as part of the FAQ. Care to clarify? –  Polynomial Nov 4 '12 at 20:06
    
What are you trying to bypass? The use of a TPM by the BIOS to boot a specific OS instance? The use of a TPM by the OS to restrict which programs are executed? The use of a TPM to store keys and if so, which keys? –  Gilles Nov 5 '12 at 13:32
add comment

2 Answers

The Trusted Platform Module which is built into all new Intel processors hasn't been around for very long and I am not aware of any publicly known attacks directly against TPM.

However, an important principle of security "The system as a whole is only as strong as its weakest link." So how TPM is bypassed really depends on how TPM is being used. A good example is ChromeOS using TPM to manage encryption keys. However, the user's encryption key is based on your password, which could be obtained with a Hardware Keylogger, Phising, Rubber Hose Cryptanalysis, or other means.

Although TPM is probably a good solution for key storage, there are many ways to obtaining secrets.

share|improve this answer
    
Personally I like prefer Thermorectal Cryptanalysis to Rubber Hose Cryptanalysis, I tend to find it's more efficient. –  ewanm89 Nov 4 '12 at 23:25
add comment

There are many ways of using trusted computing. Depending on use would depend on what attacks apply, so far I know of TPM reset attacks which find some way to glitch the TPM chip to reset, sometimes requiring physical access to the processor: http://www.cs.dartmouth.edu/~pkilab/sparks/

Also there is was a talk at Blackhat DC in 2009 about a method to bypass Intel® Trusted Execution Technology which is supposed to enforce a boot to a known trusted system: http://invisiblethingslab.com/resources/bh09dc/Attacking%20Intel%20TXT%20-%20slides.pdf

As pointed out in the other comment, it depends on how it is used, by the "scourge of freedom, on the Internet" I assume you mean UEFI SecureBoot the stuff Microsoft has mandated for installing Windows 8 on ARM processors? If so this is a newish implementation and I don't think there are any specific attacks against it yet.

TPM stuff was never designed for the basic consumer to use or OEMs it was for admins to help secure their corporate networks by being able to verify the system that is running is a known system before releasing encryption keys.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.