3 ms·
How do we know for certain that TPM chips do not have any lawful intercept code that permit an entity to bypass disk encryption and possibly even authentication
by LinuxBender 5y ago
How do we know for certain that TPM chips do not have any lawful intercept code that permit an entity to bypass disk encryption and possibly even authentication should MS decide to tie authentication caching to TPM?
- geofft 5y agoHow do you know for certain that there isn't another non-TPM chip on the device doing the same thing? How do you know for certain that the CPU microcode does not have any lawful intercept code? How do you know for certain that the Windows kernel does not have any lawful intercept code? How do you know for certain that the reason that Windows disks were not encrypted by default for decades was that the government asked them to make it that way? There's a whole industry of digital forensics that's been able to make a copy of your secret files on every MS operating system from DOS onwards. Why didn't DOS come with disk encryption?
- LinuxBender 5y agoAll valid points, I share these concerns as well. As a side note the price of TPM chips just doubled. [1] [1] - https://www.cnx-software.com/2021/06/26/tpm-2-0-modules-quadruple-in-price-out-of-stock-windows-11/ https://www.cnx-software.com/2021/06/26/tpm-2-0-modules-quad...
- Rebelgecko 5y agoUnless you have nation-state level resources I don't think that's a question you can answer for certain. You can inspect the source code, but then you have to trust the compiler and underlying hardware as well (a la "Trusting Trust": https://dl.acm.org/doi/10.1145/358198.358210 https://dl.acm.org/doi/10.1145/358198.358210)