How can I prevent attacks via compromised Attestation Identity Key (AIK) keys, such as having an attacker forging the cryptographic signature of an AIK key on TPM?


AIKs are signed by Certificate Authorities (CA) and like any certificate, they can be revoked in the same way.

Checking for revocation status is mandated by the TCG specification. See page 43.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.