3 ms·

I guess that assumes that the phone's drive is encrypted with the hardware key? Otherwise the software could just ignore the hardware. I find it ironic that t

by prewett 11y ago

I guess that assumes that the phone's drive is encrypted with the hardware key? Otherwise the software could just ignore the hardware. I find it ironic that this argument in support of TPM, etc. is being made for phones (not necessarily by you), but this same site has vigorously opposed it for PCs, especially Linux.

dmix 11y ago
Android uses TPM chips for their disk encryption scheme. I don't see why Apple wouldn't be doing the same here...
marcoperaza 11y ago
The TPM is basically another processor with a small amount of on-chip storage. It exposes two fundamental operations: seal(plaintext) returns a secret, and and unseal(secret) returns the original plaintext. If you tamper with the device, the internal storage (i.e. the keys it uses to seal and unseal) is wiped. Unseal attempts are rate limited (at the hardware level) to prevent brute force attacks. You can also seal against some other value. So you'd have seal(plaintext, pin) and unseal(secret, pin). Unseal only returns the plaintext if the PIN is the same that was used to seal. This is where it gets really fancy. The TPM has a bunch of built-in registers called PCRs (Platform Configuration Registers). You set a PCR by calling extend(newmeasurement). At boot, the firmware hashes the bootloader and sticks the hash in the first PCR by calling extend(hash). Then the bootloader measures the next boot component (probably a second stage bootloader, or perhaps the BIOS settings), and stores that hash in a PCR, and so forth. The resulting value of each PCR is based on both the measurement passed to extend() and the previous measurements, so the whole chain is verified. The cool thing is that seal() and unseal() can use these PCRs the the same way as, and in addition to, a PIN. Now your disk will only be decrypted if you boot the OS that you used to encrypt it. If you're willing to trust the firmware and OS makers, you don't even need a PIN anymore. The OS's built-in authentication could be enough. Windows PCs tend to have TPMs, but iOS devices have their own hardware encryption solution. I've glossed over and simplified away important details, but that's the gist of it.
nickik 11y ago
Nobody on the Linux side is opposed to TPM, Secure Boot and everything like that. The controversy is about who controls the key. Apple can either create a special update key for the TrustedZone and distribute it to User (SmartCard in the package you buy the phone in) or they could just put in a non-upgradable system. Both would work.

by prewett 11y ago

dmix 11y ago

Android uses TPM chips for their disk encryption scheme. I don't see why Apple wouldn't be doing the same here...

marcoperaza 11y ago

The TPM is basically another processor with a small amount of on-chip storage. It exposes two fundamental operations: seal(plaintext) returns a secret, and and unseal(secret) returns the original plaintext. If you tamper with the device, the internal storage (i.e. the keys it uses to seal and unseal) is wiped. Unseal attempts are rate limited (at the hardware level) to prevent brute force attacks. You can also seal against some other value. So you'd have seal(plaintext, pin) and unseal(secret, pin). Unseal only returns the plaintext if the PIN is the same that was used to seal. This is where it gets really fancy. The TPM has a bunch of built-in registers called PCRs (Platform Configuration Registers). You set a PCR by calling extend(newmeasurement). At boot, the firmware hashes the bootloader and sticks the hash in the first PCR by calling extend(hash). Then the bootloader measures the next boot component (probably a second stage bootloader, or perhaps the BIOS settings), and stores that hash in a PCR, and so forth. The resulting value of each PCR is based on both the measurement passed to extend() and the previous measurements, so the whole chain is verified. The cool thing is that seal() and unseal() can use these PCRs the the same way as, and in addition to, a PIN. Now your disk will only be decrypted if you boot the OS that you used to encrypt it. If you're willing to trust the firmware and OS makers, you don't even need a PIN anymore. The OS's built-in authentication could be enough. Windows PCs tend to have TPMs, but iOS devices have their own hardware encryption solution. I've glossed over and simplified away important details, but that's the gist of it.

nickik 11y ago

Nobody on the Linux side is opposed to TPM, Secure Boot and everything like that. The controversy is about who controls the key. Apple can either create a special update key for the TrustedZone and distribute it to User (SmartCard in the package you buy the phone in) or they could just put in a non-upgradable system. Both would work.