3 ms·
What application does a hardware-backed root of trust have for more consumer/non-server products like laptops/phones? Dos this differ substantially from a TPM?
by ssklash 7y ago
What application does a hardware-backed root of trust have for more consumer/non-server products like laptops/phones?
Dos this differ substantially from a TPM? Could it be used to verify integrity of a system from power-on to finishing booting say a Linux distro?
- saagarjha 7y agoThe page draws parallels to Google’s Titan security chip, so I’d assume it can verify the boot chain.
- wmf 7y agoApparently Google phones and some Chromebooks have a Titan-C chip [1], although it's not clear how it's more secure than the Intel secure boot architecture. [1] Google managed to build a chip with an un-Google-able name
- saagarjha 7y agoTitan-M? https://duckduckgo.com/?q=google+titan+chip https://duckduckgo.com/?q=google+titan+chip
- pgeorgi 7y agoThe chip in Chromebooks is called cr50 or h1. It has open source firmware (https://github.com/coreboot/chrome-ec/tree/master/board/cr50 https://github.com/coreboot/chrome-ec/tree/master/board/cr50) and a few public mentions, e.g. https://2018.osfc.io/talks/google-secure-microcontroller-and-ccd-closed-case-debugging.html https://2018.osfc.io/talks/google-secure-microcontroller-and...
- monocasa 7y agoIn addition to secure boot, it could be the basis for hardware security modules like yubikeys.