Trusted Platform Module (TPM) and other protocols and components of trust in a computer or computer network
2
votes
2answers
71 views
Is there any way of recover a locked drive using TPM?
Just reading I learned about the TPM technology and how it works.
However, it make me wonder... if the motherboard crashes, is the data lost forever? Because you can't use the drive in other system ...
5
votes
1answer
117 views
When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
When you take ownership of a TPM in Windows 7 you encounter a screen like this:
Based on this document, it is my understanding that completing this dialog box somehow results in the generation of ...
3
votes
1answer
99 views
Is this a security risk for us to lost TPM or others to access to reset BIOS ?
In the previous post Physically secure the system case it is recommended to physically protect the system. But in case stolen laptops where intruder have physical access to TPMs. What are the security ...
5
votes
2answers
147 views
How do you know a computer is not compromised when you first get it?
How do you know a computer is not compromised when you first get it? How do you know that manufacturers have not intentionally built vulnerabilities into the system?
4
votes
3answers
136 views
Does “late launch”/“dynamic chain of trust” allow remote attestation?
One of the features support by modern processes and Trusted Platform Modules is "dynamic chain of trust" (also known under the acronym DRTM, for dynaimc root of trust measurement). This allows ...
5
votes
3answers
347 views
Does any tablet support remote attestation?
Some PCs come with a TPM. One of the nifty capabilities of TPMs is the ability to perform remote attestation. Remote attestation allows your computer to tell a third computer what software your ...
0
votes
2answers
151 views
Bypassing Trusted Computing
I have not been able to find any information about trusted computing, scourge of freedom, on the Internet. I am reasonably sure that it's software manifestation can be bypassed by a Linux live disk, ...
2
votes
3answers
520 views
Can someone detect the URL an android app uses?
I have an android app that makes HTTPS connection to specific URL. Is there a way to keep this URL secret?
I know that the IP address and the port number of that connection can be detected, but what ...
6
votes
2answers
163 views
TPM and storage of keys
A TPM hardware device has very limited non-volatile protected memory just sufficient to store the EK (Endorsement Key) and SRK (Storage Root Key). How does a TPM allow nearly unlimited number of ...
2
votes
1answer
63 views
What is this hardened computer called? [closed]
After undergoing a security audit, it was suggested that a hardened computer be placed in the DMZ to run firewall software. What is this hardened computer called?
5
votes
1answer
223 views
TPM bootstrap process
Assume that the file partition where the PC operating system and user data reside are sealed by a number of PCRs (Platform Configuration Registers) dedicated to BIOS measurements. What happens during ...
2
votes
1answer
189 views
Windows 8 in a VDI environment and the use of Secure Boot
I have a question, How would secure boot be implemented in a virtulized environment, say XEN hypervisor with multiple guest OS's including Windows 8 guest VM? does the guest VM need access to the ...
12
votes
3answers
637 views
How secure is Microsoft-mandated UEFI Secure Boot, really?
I've read a few articles recently about the UEFI Secure Boot feature, and how Microsoft will be requiring it to be enabled by default on all Windows 8 certified x86 systems. In theory, it sounds like ...
5
votes
2answers
710 views
Using TPM with DMcrypt?
Is it possible to use TPM for storage of some private key? It's not a full-disk encryption , I want it to be compatible with existing LUKS, just add another key, and store it in the TPM.
10
votes
2answers
933 views
Tamper-proof BIOS password & settings storage with Trusted Platform Module?
In the olden days, one could trivially bypass BIOS passwords on most PCs by removing the BIOS battery and clearing the CMOS.
My question is: On modern PCs equipped with a Trusted Platform Module ...
12
votes
2answers
707 views
Status of Trusted Computing and Remote Attestation deployment
Hardware support for various client-side controls based on Trusted Computing (Wikipedia) has been evolving over the years, e.g. TCPM, TPM, TXT (LaGrande, DRTM).
I've heard of one practical ...
5
votes
3answers
632 views
vt-d Virtualisation and Trusted Execution Technology
Being a long time VirtualBox user and having recently purchased a new laptop equipped with an intel i7 720QM I discovered that it supported vt-d.
In the meantime I've found out that vt-d comes with ...
