Timeline for What really is the difference between firmware TPM and a discrete one and should it be trusted more?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 8, 2023 at 16:52 | comment | added | akostadinov | Good points. I just read how easy it was to sniff on the SPI so having the option in bios to use firmware TPM instead started to make a lot of sense. | |
| Feb 23, 2022 at 17:25 | comment | added | ARGYROU MINAS | Indeed the TPM's purpose may not be hardware attack detection/prevention, and I have mentioned that in my answer. But, an fTPM does provide some protection againt e.g. a malicious CPU, since the fTPM is part of the CPU and it's the CPU that actually does the measurements. Claims that dTPMs are more secure aren't quite substantiated... I haven't seen a TPM with EAL5+ etc. (yeah, EAL is better than FIPS, in my opinion). Counterargument: someone may more easily attack the fTPM of the CPU. Reply: If they have managed to subvert my CPU, I won't be saved my the, supposedly, secure dTPM. | |
| Feb 23, 2022 at 17:07 | comment | added | MemAllox | The TPM does not aim to protect against a malicious CPU. If an attacker has physical access to your machine, exchanging the CPU is probably the last they will do. | |
| Feb 23, 2022 at 1:24 | history | answered | ARGYROU MINAS | CC BY-SA 4.0 |