Does a TPM
replace the default device's security, or add to it?
I will try to re formulate it into 2 questions, just to explain what my question is, since I am not very good at English writing.
If we take randomness as a example:
- Does the TPM
replacethe device's own ability to generate its own randomness? (The randomness the device itself would have generated without the TPM)
- Does the TPM
addit's randomness (thereby
increasingthe entropy of the device's own randomness?) to the device's
I have searched around security stack exchange, as well as sent a mail to the company I bought the TPM from, which had no idea either. And recommended me to ask someone else. But I have not found any answers that would specifically answer if a TPM does this or not.
And, If the TPM does
replace the default randomness or, key generation from the device, wouldn't that be much more insecure?
(for the risk of attacks, because of weak key generation, as stated in the Wikipedia article below) as a reference, the Wikipedia site about a TPM:
"In 2015, as part of the Snowden revelations, it was revealed that in 2010 a US CIA team claimed at an internal conference to have carried out a differential power analysis attack against TPMs that was able to extract secrets." - [https://en.wikipedia.org/wiki/Trusted_Platform_Module]
Please, if you find any errors, or that this question could be placed in another site, need clarification - do not hesitate to say that/improve my question!
I appreciate it, thank you!