Timeline for What stops a bad BIOS lying to the TPM?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Feb 20 at 21:47 | vote | accept | Bob | ||
| Jul 28, 2021 at 15:30 | comment | added | Brian | @Bob: I'll note that if you have a bios password, then retrieving protected keys from the TPM (e.g., those used for whole disk encryption) won't be feasible without that password. A competent design will use cryptography in a way that precludes compromising this key with via physical access (exceptions for brute forcing bad passwords, hardware intercepts/keyloggers, video cameras pointed at the keyboard, etc.). | |
| Jul 26, 2021 at 13:00 | comment | added | sau_t | OTP (One time programmable) NVM is used and AFAIK malware cannot modify them. Attacks on these NVM requires special equipment. | |
| Jul 26, 2021 at 12:42 | comment | added | Bob | Ok. So could any normal malware modify it or would you need special hardwarw tools or something? | |
| Jul 26, 2021 at 12:38 | comment | added | sau_t | Completely immutable is not the word I'll use. It's immutable and generally use read-only storage area for e.g. NV-memory. | |
| Jul 26, 2021 at 12:09 | comment | added | Bob | Thank you, this is interesting. So the CRTM is completely immutable then? | |
| Jul 25, 2021 at 20:59 | history | answered | sau_t | CC BY-SA 4.0 |