2

How can I prevent attacks via compromised Attestation Identity Key (AIK) keys, such as having an attacker forging the cryptographic signature of an AIK key on TPM?

Improve this question

1 Answer 1

Reset to default
1

AIKs are signed by Certificate Authorities (CA) and like any certificate, they can be revoked in the same way.

Checking for revocation status is mandated by the TCG specification. See page 43.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .