3 ms·
While I agree with you with the snakeoil argument, I also have to say: TPM chips are useless because there's already tools available to listen on the SPI bus f
by cookiengineer 5y ago
While I agree with you with the snakeoil argument, I also have to say:
TPM chips are useless because there's already tools available to listen on the SPI bus for encryption keys. [1] [2]
It's only a matter of time until other key formats (other than Bitlocker) are supported.
I think the only way to secure the drive is being able to write your own drive controller firmware. But even then HDD plates could be just "swapped into" another HDD.
[1] https://www.saleae.com/ https://www.saleae.com/
[2] https://github.com/FSecureLABS/bitlocker-spi-toolkit https://github.com/FSecureLABS/bitlocker-spi-toolkit
- josephcsible 5y agoThat attack isn't relevant in this case, because it only lets you steal the keys if the TPM chooses to release them to the CPU, but if you don't know the right PIN, or use a nuke PIN, then it won't do so.