User saurabh

4 votes

Accepted

Since TPM firmware is updatable can it be exploited by malicious hardware actors?

answered Jul 8, 2021 at 15:11

3 votes

Accepted

Secure boot after an OTA update confusion

answered Mar 14, 2022 at 13:55

3 votes

Accepted

What is the point of storing hashed passwords? If that file is read, doesn't that mean the computer has already been compromised?

answered Jul 6, 2021 at 19:02

3 votes

Accepted

Storing SSL certificates for developers

answered Jun 28, 2021 at 11:41

2 votes

Would the new TPM policy in Windows 11 hinder dual booting?

answered Jun 28, 2021 at 19:19

2 votes

Accepted

Required certificate key usage for signing document

answered Jun 29, 2021 at 7:30

2 votes

How to update certificates/CRL on Windows 7 systems that are without support contracts?

answered Jun 12, 2021 at 10:09

2 votes

Can you obtain the passphrase of an encrypted SSH key, given the unencrypted key?

answered Jul 14, 2021 at 7:14

2 votes

Accepted

Understanding TPM PCRs, PCR banks, indexes and their relations

answered Jul 15, 2021 at 21:00

2 votes

Accepted

Sealing a pass-phrase with the TPM and associating it with a file state

answered Jul 23, 2021 at 7:38

2 votes

Can a Trusted Platform Module be used as a Trojan Horse?

answered Jun 11, 2021 at 7:23

1 vote

If a file is digitally signed, is posting a hash very useful for security purposes?

answered Jun 11, 2021 at 14:26

1 vote

How good/bad are these transparent Linux consumer FDE setup options? (e.g. for auto-unlocking LUKS)

answered Jun 9, 2021 at 20:40

1 vote

What are the disadvantage of only encrypting the HDD compared to FDE with secure boot

answered Jul 3, 2021 at 20:01

1 vote

What stops a bad BIOS lying to the TPM?

answered Jul 25, 2021 at 20:59

1 vote

Accepted

Can certificates be blocked temporarily by CAs?

answered Aug 30, 2021 at 10:46

1 vote

Accepted

Are TPM PCRs volatile, non-volatile, or both?

answered May 29 at 7:48

1 vote

Accepted

How to protect private key for client cert in machine store? Is it acceptable for it to be exportable?

answered Mar 23, 2022 at 20:20

1 vote

Does Openssl support server certificate key usage validation during Tls handshake?

answered Jul 1, 2021 at 19:39

1 vote

Does / Can a HSM or TPM encrypt my private keys

answered Jun 1, 2021 at 21:51

1 vote

Accepted

Does a TPM chip simply replicate the BIOS function of checking platform integrity?

answered Jun 4, 2021 at 19:35

1 vote

How safe is dm-crypt/LUKS? Would TPM make me more secure in this case?

answered Jun 7, 2021 at 8:04

1 vote

How should GNU/Linux noobs harden their dekstop OS?

answered Jun 7, 2021 at 20:32

1 vote

Accepted

Tactics to ensure payload has not been modified

answered Jun 7, 2021 at 22:35

0 votes

Creating Client certificate for mutual TLS authentication

answered Jun 9, 2021 at 13:14

0 votes

Key Exchange using RSA public key without a certificate

answered Jun 5, 2021 at 12:02

0 votes

Secure way to encrypt (not hash) passwords?

answered Jun 4, 2021 at 17:23

0 votes

Accepted

Using Hardware Encryption on NVME SSD used as the boot device

answered Jul 2, 2021 at 15:08

0 votes

Is it fine to save contact information on a ssh sever and is it secure?

answered Jun 13, 2021 at 20:56

0 votes

Sensor device web interface certificate

answered Jun 16, 2021 at 22:55

Stack Exchange Network

34 Answers

Since TPM firmware is updatable can it be exploited by malicious hardware actors?

Secure boot after an OTA update confusion

What is the point of storing hashed passwords? If that file is read, doesn't that mean the computer has already been compromised?

Storing SSL certificates for developers

Would the new TPM policy in Windows 11 hinder dual booting?

Required certificate key usage for signing document

How to update certificates/CRL on Windows 7 systems that are without support contracts?

Can you obtain the passphrase of an encrypted SSH key, given the unencrypted key?

Understanding TPM PCRs, PCR banks, indexes and their relations

Sealing a pass-phrase with the TPM and associating it with a file state

Can a Trusted Platform Module be used as a Trojan Horse?

If a file is digitally signed, is posting a hash very useful for security purposes?

How good/bad are these transparent Linux consumer FDE setup options? (e.g. for auto-unlocking LUKS)

What are the disadvantage of only encrypting the HDD compared to FDE with secure boot

What stops a bad BIOS lying to the TPM?

Can certificates be blocked temporarily by CAs?

Are TPM PCRs volatile, non-volatile, or both?

How to protect private key for client cert in machine store? Is it acceptable for it to be exportable?

Does Openssl support server certificate key usage validation during Tls handshake?

Does / Can a HSM or TPM encrypt my private keys

Does a TPM chip simply replicate the BIOS function of checking platform integrity?

How safe is dm-crypt/LUKS? Would TPM make me more secure in this case?

How should GNU/Linux noobs harden their dekstop OS?

Tactics to ensure payload has not been modified

Creating Client certificate for mutual TLS authentication

Key Exchange using RSA public key without a certificate

Secure way to encrypt (not hash) passwords?

Using Hardware Encryption on NVME SSD used as the boot device

Is it fine to save contact information on a ssh sever and is it secure?

Sensor device web interface certificate