8 votes

Practicality of outsourcing password hashing using enclaves

While trusted execution environments are useful, I don't think that outsourcing password hashing from server to the client is the right approach. Either the server only has the hashed password for ...
Steffen Ullrich's user avatar
3 votes

Is there any mechanism available in Android platform for remote attestation?

There are Android phones with hardware-backed storage. This is supported since Android 4.3, ie. mid 2013, (SDK18) over the KeyChain API. From the changelog: Android also now supports hardware-...
Patrick's user avatar
  • 139
2 votes

Is ransomware that threatens with publication and verifiably deletes upon payment possible?

I don't see any way how this could be possible. When you have a copy of data, there is no way to prove that no other copy of that data exists, because you can not prove a negative. Trying to prove a ...
Philipp's user avatar
  • 49.4k
2 votes

Is ransomware that threatens with publication and verifiably deletes upon payment possible?

I don't think it's possible to prove that you DON'T know a piece of information. This is relevant to your question because in order to guarantee that he won't publish your files after payment is ...
Out of Band's user avatar
  • 9,273
2 votes

Differences between Intel TXT and Linux IMA

No, they are complementary. DRTM provides a Root of Trust on which you can build applications/use-cases such as Integrity measurement of your entire linux system (IMA). However, it is not part of it. ...
northox's user avatar
  • 1,433
2 votes

Is there any mechanism available in Android platform for remote attestation?

The current answers here are now out of date. The Google Pixel 2 now contains the hardware support for remote attestation, and has it's own variant to meets the needs of the TPM. "TEE - trusted ...
Ev0xFrost's user avatar
1 vote

How to bind TPM2.0 AK to the "AK name" used in tpm2_makecredential, and how is trust established in AIK?

Unless the server can independently compute the NAME from AK public key and other attributes to match the provided "AK name", but how to compute? The "name" of a TPM Object can be ...
gilb3rt's user avatar
  • 41
1 vote
Accepted

What's the feasibility of making a hostile TPM chip?

fundamentally if you can read bits you can clone them. Yes. But remote attestation relies on a signature, not just a hash. The signature is made by a private key which is located in the TPM, and you ...
Gilles 'SO- stop being evil''s user avatar
1 vote
Accepted

TPM with the three main groups of functions

the TPM guarantees that malicious software cannot access the keys at all. Even the owner of the keys cannot give the private keys away to phishing or pharming attacks, as the keys are never visible ...
Gilles 'SO- stop being evil''s user avatar
1 vote

Intel SGX - Remote attestation

The article Code Sample: Intel Software Guard Extensions Remote Attestation End-to-End Example (by John M. from Intel), describes an example of remote attestation. (The source code of most of the ...
Oren Milman's user avatar
1 vote

Using the TPM module to measure boot process and remote attestation

The TPM seals arbitrary data using a key derived from the state of its PCRs. It is up to you to tell if that data is correct. It could be a decryption key, so the disk can only be read when the PCRs ...
forest's user avatar
  • 66.7k
1 vote
Accepted

TPM based authentication without a trusted third party

TPM operations which need the EK: Take the ownership Clear the TPM Change the SRK Change the Owner(obviously) Allow SRK read using SRK auth (tpm_restrictsrk -a) Basically, these are all ...
Damien's user avatar
  • 293
1 vote

What, or who, exactly is a Certificate Authority (CA) for TPM attestation?

A TPM is equipped with a key pair during manufacture. The private key is stored inside the TPM and it is physically protected by tamper-resistant technologies. The public key is certified. Given such ...
user2768's user avatar
  • 117

Only top scored, non community-wiki answers of a minimum length are eligible