116
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
We can analyze your setup by comparing it against a system known to be not tamper proof, the Sony PlayStation 3.
OS control
You have no control over the OS. Sony did write the OS themselves.
Size ...
- 2,689
89
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
There are too many things that can be done at the OS level. That's the actual problem. There are numerous ways to launch processes and/or explore the system. One important aspect is that it looks like ...
- 8,939
39
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
It sounds like you're creating an arcade machine. In that case, learn from the companies who actually make and sell arcade machines, and Use Windows Embedded instead of the desktop version.
Using TPM ...
37
votes
What are the differences between TPM and HSM?
Sorry, but I think there are some gaps in this conversation:
TPMs can't be added later : False. Many modern motherboards include a header to which a TPM can be added after the fact. Visit Amazon ...
- 471
35
votes
Accepted
Do a TPM's benefits outweigh the risks?
It depends on your threat model. A TPM has multiple purposes, but the most common purpose is measured boot. That is, a TPM will verify the integrity of the BIOS, option ROMs, bootloader, and other ...
- 67.3k
30
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
This is not secure. The hardware is under the control of the user, so they can always find a way.
I'm assuming that TPM is meant to prevent the user from starting another OS (like Ubuntu) from CD, ...
27
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
Some ideas of attack against that:
Windows normally comes with a Repair mode. It may be more or less easy to activate it (ref., but if it is possible the user can make the computer start in command ...
- 26.9k
24
votes
Accepted
TPM or OpenSSL for key generation?
The difference between using some hardware backed key store (i.e. TPM, HSM, smartcard ...) and a "pure software" solution like openssl genrsa is not so much about the security of the key ...
- 208k
23
votes
What's the difference between the endorsement key and the attestation identity key within the TPM?
Unfortunately there is not a single source of truth about attestation. I'll try to make it as clear as possible and cite when necessary.
TL;DR: The Endorsement Key is used to prove that you are ...
- 601
19
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
Only one attack is enough to prove that it's insecure, right?
Press the Shift key 5 times. A dialog will pop up, asking if you want to activate some feature for disabled persons.
On that dialog, ...
- 3,434
16
votes
Accepted
What are the functional similarities and differences between TPM and SGX in trusted computing?
Well first off, SGX is not a crypto chip. It is a feature built into Intel chipsets themselves, whereas the TPM is often a discrete chip positioned on the LPC bus, though sometimes it can be emulated ...
- 67.3k
15
votes
Accepted
How does full memory encryption in newer processes protect against DMA attacks?
How does memory encryption impact DMA attacks?
Full-memory encryption is not designed to protect against DMA attacks. That is what an IOMMU is for. The IOMMU is configured using a type of ACPI table ...
- 67.3k
13
votes
Is BitLocker susceptible to any known attacks other than bruteforcing when used with a very strong passphrase and no TPM?
While there are more than one, the Cold Boot attack is probably the most infamous type of attack on encryption keys like Bitlocker’s.
The Cold Boot attack is a physical attack that can dump encryption ...
- 3,035
10
votes
Accepted
Usage of Android Keystore
Let's take a look at the Android Developer docs "Android keystore system". We'll need to break this down depending on how you use the KeyStore object. If you're using the Android KeyStore KeyStore....
- 59.3k
10
votes
Is BitLocker susceptible to any known attacks other than bruteforcing when used with a very strong passphrase and no TPM?
It depends totally on your threat model
If the attacker can physically access a powered on machine protected by only screen lock, the cold boot or DMA attacks will work.
If the attacker can physically ...
- 1,457
9
votes
What happens when a TPM chip breaks or fails?
If the TPM 'breaks' or becomes otherwise inaccessible, all cryptography dependent on keys stored by the TPM also breaks. This is the most concise and inclusive way I could think to put it.
I say '...
- 618
9
votes
Is BitLocker susceptible to any known attacks other than bruteforcing when used with a very strong passphrase and no TPM?
Other than the Cold Boot attack outlined by @security_paranoid, another way to extract raw encryption key from the RAM is to perform DMA attack, where the key is leaked out through a DMA-capable ...
- 291
7
votes
Difference between TPM, TEE and SE
A little more on the functional aspects:
TPM is fixed, well-specified functionality by an ISO and TCG standard. You can‘t just add or change this.
Usually it‘s a discrete security chip connected ...
- 121
7
votes
Use of TPM to encrypt data of my application in practice
There are two different ways of using a TPM chip to encrypt application data. Both have different security properties.
First, a TPM chip can be used as a cheap, low-end hardware security module (HSM). ...
- 23k
6
votes
TPM 2.0 PKCS#11 on Windows and Linux
- It's a bit old question, but I managed to found a solution that worked for me.
There's available on Github a module that provides PKCS#11 backend for TPM 2.0 chips.
Usage:
Create TPM Key
Create ...
- 572
6
votes
Can we tamper-proof a game that's sold along with the Windows machine it runs on?
As others have said, this cannot be considered secure. You can however remove the 'low hanging fruit', both to reduce the chances of your software being stolen and to ensure your users experience is ...
- 161
6
votes
Accepted
What really is the difference between firmware TPM and a discrete one and should it be trusted more?
It is very hard to quantify security and justify trust. Before you read on: think about what you want to protect against whom. Make a risk analysis.
I have heard mainly two justifications why physical ...
- 601
6
votes
Does / Can a HSM or TPM encrypt my private keys
Let's do a thought-experiment.
Imagine a device whose purpose in life is to hold a private key. There are a couple of things it will do for you; you can ask it:
Please wipe your own memory and ...
- 59.3k
6
votes
Accepted
Is it possible to use HKDF in the TPM?
If it isn't in the spec it isn't in there. The question is if you need it if e.g. the NIST SP 800-108 KDF in counter mode is present. That's a fine KDF even if it lacks explicit extract / expand steps ...
- 4,808
6
votes
Accepted
What is the reason why Microsoft decided not to provide updates when bypassing TPM requirements?
Does Microsoft say they won't provide updates? The KB Doc about installing on unsupported systems says:
Devices [..] will no longer be guaranteed to receive updates
They want to use capabilities of ...
- 791
5
votes
What are the differences between TPM and HSM?
TPMs are very exactly specified parts wrt to function and security level they provide (https://www.trustedcomputinggroup.org).
It has fixed function, is a rather low cost and yet high security chip (...
- 121
5
votes
How are TPMs provisioned for Intel Trusted Execution Environment (TXT)?
The Intel TXT is a complex system designed to provide a hardware layer of security that can prevent software layer changes from resulting in increased access for attackers. Through use of stored ...
- 1,451
5
votes
Is it possible to extract secrets from a TPM without knowing the PIN?
I have worked with TPM and HSMs in the realm of PCI PTS PED devices and certifications, so that is what I will use for the basis of my answers. They don't all work the same, and usually the datasheet ...
- 216
5
votes
Usage of Android Keystore
The other answers cover everything pretty well, but one aspect seems to be misunderstood. As the other answers quoted, ...
Key material never enters the application process. When an application
...
5
votes
Do a TPM's benefits outweigh the risks?
In the section on the bottom, it mentions some criticisms of TPM such as remote validation of software - manufacturer, not the user decides what can be run on the computer
There is a fundamental ...
- 5,418
Only top scored, non community-wiki answers of a minimum length are eligible