Trusted Platform Module (TPM) and other protocols and components of trust in a computer or computer network

learn more… | top users | synonyms

4
votes
1answer
156 views

TPM support with OpenSSL FIPS Object Module

How can I use a TPM chip along with the OpenSSL FIPS Object Module without modifying OpenSSL FIPS Object Module (to avoid Private Label certification)? Should we add an engine interface in OpenSSL ...
4
votes
0answers
59 views

How can one protect TPM firmware from tampering?

I know that a TPM includes ROM, nonvolatile (e.g. EEPROM), and volatile (e.g. SRAM) memories. The executable firmware is stored in ROM, such as various drivers and commands. But this time, I want to ...
3
votes
0answers
17 views

How are TPMs provisioned for Intel Trusted Execution Environment (TXT)?

For Intel TXT to work, the TPM must be provisioned. Intel provides some tools for doing this but many are protected by non-public login or an NDA. Many OEM platform vendors provision their boards and ...
3
votes
0answers
39 views

how to create TPM_AUTHDATA as input in tpm commands ?

I'm writing my first program which use tpm (version 1.2) services in Windows 7 using TBS, in this program I'm trying to execute the TPM_CreateWrapKey command. I noticed that many commands like the ...
1
vote
0answers
13 views

How is the AIK TPM generated?

Here is what I understood from the AIK(Attestation Identity Key) generation the AIK is generated after the boot, when all the PCRs have been initialized. The algorithm will take some PCRs (not ...
1
vote
0answers
28 views

Chain of Trust Extension with TPM2.0

I am looking for a way to implement a trusted boot using a firmware TPM2.0 on Arch Linux. I am using TPM2.0-TSS, and tpm2-tools, however I cannot find a way to do this with tpm2-tools, as I do not ...
1
vote
0answers
971 views

TPM PCR value unchanged with BIOS configuration changes

I have been experimenting with the TPM on a Dell R710 (BIOS version 6.3.0). My goal was to detect changes to BIOS settings through TPM PCRs. The research I have done leads me to believe that BIOS ...
0
votes
0answers
28 views

Take ownership on TPM 2.0

When I try to take the ownership on my TPM 2.0, I run the tpm2_takeownership command. For the first time, I got this error: ./tpm2_takeownership -e 0123 -o 0123 -l 0123 ......Change Hierarchy Owner ...
0
votes
0answers
26 views

Kernel-based integrity measurement of an operating system startup in RAM

This idea is based on the Integrity Measurement Architecture and the usage of a trusted platform module to ensure the integrity of boot procedures. Let's say we have a kernel designed for an embedded ...
0
votes
0answers
29 views

Decrypting keys wrapped by the Storage Root Key (SRK) of a TPM

Lets say I have a symmetric key wrapped with a storage root key (SRK) in a TPM. The SRK cannot be read by an attacker and so I perform the decryption and using the SRK and get the symmetric key in ...
0
votes
0answers
44 views

What is the market acceptance of ARM trustzone vs standalone TPM?

ARM are keen on marketing their Trustzone features, in a secure implementation (e.g. with OTP memory/fuses), to establish a TEE on an SOC. Generally, what is the market view on the security of this ...
0
votes
0answers
42 views

TPM based authentication without a trusted third party

Consider a scenario - Device manufacture provides in advance the TPM’s endorsement key certificate(containing EK public key) for device to be deployed. In general, what are the TPM operations that ...
0
votes
0answers
42 views

In practice, does TPM SRK really be decrypted by EK first, before it decrypt its child keys

I know that TPM SRK was generated when user take TPM ownership, and it is encrypted by EK public part. All the child keys under SRK need to be loaded into TPM and decrypted by SRK before use. (These ...