Skip to main content
116 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

We can analyze your setup by comparing it against a system known to be not tamper proof, the Sony PlayStation 3. OS control You have no control over the OS. Sony did write the OS themselves. Size ...
MSalters's user avatar
  • 2,689
89 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

There are too many things that can be done at the OS level. That's the actual problem. There are numerous ways to launch processes and/or explore the system. One important aspect is that it looks like ...
Overmind's user avatar
  • 8,899
39 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

It sounds like you're creating an arcade machine. In that case, learn from the companies who actually make and sell arcade machines, and Use Windows Embedded instead of the desktop version. Using TPM ...
twisteroid ambassador's user avatar
37 votes

What are the differences between TPM and HSM?

Sorry, but I think there are some gaps in this conversation: TPMs can't be added later : False. Many modern motherboards include a header to which a TPM can be added after the fact. Visit Amazon ...
Paul Vilevac's user avatar
33 votes
Accepted

Do a TPM's benefits outweigh the risks?

It depends on your threat model. A TPM has multiple purposes, but the most common purpose is measured boot. That is, a TPM will verify the integrity of the BIOS, option ROMs, bootloader, and other ...
forest's user avatar
  • 66.9k
30 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

This is not secure. The hardware is under the control of the user, so they can always find a way. I'm assuming that TPM is meant to prevent the user from starting another OS (like Ubuntu) from CD, ...
S.L. Barth is on codidact.com's user avatar
27 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

Some ideas of attack against that: Windows normally comes with a Repair mode. It may be more or less easy to activate it (ref., but if it is possible the user can make the computer start in command ...
Serge Ballesta's user avatar
24 votes
Accepted

Difference between TPM, TEE and SE

First let's layout the different definitions: TPM is a piece of Hardware specifically created to do crypto calculation with. It is physically isolated from the rest of the processing system and is ...
LvB's user avatar
  • 8,963
24 votes
Accepted

TPM or OpenSSL for key generation?

The difference between using some hardware backed key store (i.e. TPM, HSM, smartcard ...) and a "pure software" solution like openssl genrsa is not so much about the security of the key ...
Steffen Ullrich's user avatar
21 votes

What's the difference between the endorsement key and the attestation identity key within the TPM?

Unfortunately there is not a single source of truth about attestation. I'll try to make it as clear as possible and cite when necessary. TL;DR: The Endorsement Key is used to prove that you are ...
MemAllox's user avatar
  • 581
19 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

Only one attack is enough to prove that it's insecure, right? Press the Shift key 5 times. A dialog will pop up, asking if you want to activate some feature for disabled persons. On that dialog, ...
Thomas Weller's user avatar
16 votes
Accepted

What happens when a TPM chip breaks or fails?

The purpose of a TPM module is to ensure that there is absolutely no way to obtain the keys stored on it. Whether or not it actually fulfills that purpose is a topic for another question. For now let'...
Philipp's user avatar
  • 49.4k
16 votes
Accepted

What are the functional similarities and differences between TPM and SGX in trusted computing?

Well first off, SGX is not a crypto chip. It is a feature built into Intel chipsets themselves, whereas the TPM is often a discrete chip positioned on the LPC bus, though sometimes it can be emulated ...
forest's user avatar
  • 66.9k
13 votes
Accepted

How does full memory encryption in newer processes protect against DMA attacks?

How does memory encryption impact DMA attacks? Full-memory encryption is not designed to protect against DMA attacks. That is what an IOMMU is for. The IOMMU is configured using a type of ACPI table ...
forest's user avatar
  • 66.9k
10 votes
Accepted

Usage of Android Keystore

Let's take a look at the Android Developer docs "Android keystore system". We'll need to break this down depending on how you use the KeyStore object. If you're using the Android KeyStore KeyStore....
Mike Ounsworth's user avatar
9 votes

What happens when a TPM chip breaks or fails?

If the TPM 'breaks' or becomes otherwise inaccessible, all cryptography dependent on keys stored by the TPM also breaks. This is the most concise and inclusive way I could think to put it. I say '...
Wilbur Whateley's user avatar
8 votes

What does CRTM refer to?

CRTM is saved in the Platform Configuration Registers (PCR), register 0 to be more precise (PCR-0). CRTM is (physically) embedded into chip silicon and provided by the BIOS, but is a logical part of ...
Overmind's user avatar
  • 8,899
7 votes

Difference between TPM, TEE and SE

A little more on the functional aspects: TPM is fixed, well-specified functionality by an ISO and TCG standard. You can‘t just add or change this. Usually it‘s a discrete security chip connected ...
Scott McCoy's user avatar
6 votes

TPM 2.0 PKCS#11 on Windows and Linux

- It's a bit old question, but I managed to found a solution that worked for me. There's available on Github a module that provides PKCS#11 backend for TPM 2.0 chips. Usage: Create TPM Key Create ...
mike's user avatar
  • 572
6 votes

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

As others have said, this cannot be considered secure. You can however remove the 'low hanging fruit', both to reduce the chances of your software being stolen and to ensure your users experience is ...
Spaig87's user avatar
  • 161
6 votes
Accepted

What really is the difference between firmware TPM and a discrete one and should it be trusted more?

It is very hard to quantify security and justify trust. Before you read on: think about what you want to protect against whom. Make a risk analysis. I have heard mainly two justifications why physical ...
MemAllox's user avatar
  • 581
6 votes

Does / Can a HSM or TPM encrypt my private keys

Let's do a thought-experiment. Imagine a device whose purpose in life is to hold a private key. There are a couple of things it will do for you; you can ask it: Please wipe your own memory and ...
Mike Ounsworth's user avatar
6 votes
Accepted

Is it possible to use HKDF in the TPM?

If it isn't in the spec it isn't in there. The question is if you need it if e.g. the NIST SP 800-108 KDF in counter mode is present. That's a fine KDF even if it lacks explicit extract / expand steps ...
Maarten Bodewes's user avatar
6 votes
Accepted

What is the reason why Microsoft decided not to provide updates when bypassing TPM requirements?

Does Microsoft say they won't provide updates? The KB Doc about installing on unsupported systems says: Devices [..] will no longer be guaranteed to receive updates They want to use capabilities of ...
PasWei's user avatar
  • 776
5 votes

What are the differences between TPM and HSM?

TPMs are very exactly specified parts wrt to function and security level they provide (https://www.trustedcomputinggroup.org). It has fixed function, is a rather low cost and yet high security chip (...
Scott McCoy's user avatar
5 votes

How are TPMs provisioned for Intel Trusted Execution Environment (TXT)?

The Intel TXT is a complex system designed to provide a hardware layer of security that can prevent software layer changes from resulting in increased access for attackers. Through use of stored ...
Connor Peoples's user avatar
5 votes

Is it possible to extract secrets from a TPM without knowing the PIN?

I have worked with TPM and HSMs in the realm of PCI PTS PED devices and certifications, so that is what I will use for the basis of my answers. They don't all work the same, and usually the datasheet ...
noone392's user avatar
  • 216
5 votes

Usage of Android Keystore

The other answers cover everything pretty well, but one aspect seems to be misunderstood. As the other answers quoted, ... Key material never enters the application process. When an application ...
President James K. Polk's user avatar
5 votes

Do a TPM's benefits outweigh the risks?

In the section on the bottom, it mentions some criticisms of TPM such as remote validation of software - manufacturer, not the user decides what can be run on the computer There is a fundamental ...
usr-local-ΕΨΗΕΛΩΝ's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible