2 ms·
It really depends on what your threat model is. For most people, the threat model is primarily malware attacks, against which even a homebrew TPM will protect.
by Nextgrid 5y ago
It really depends on what your threat model is.
For most people, the threat model is primarily malware attacks, against which even a homebrew TPM will protect. Ideally you'd want something that literally can't be reprogrammed from the host, but even then, since it's a custom-made device an attacker would need to manually reverse-engineer it to attack it so you'd still be safe against anything but a targeted attack.
Of course, this assumes you even care about using the TPM in the first place. If you just want to satisfy Windows' requirement then security is not a concern at all.
- GTP 5y agoI don't agree about malware protection: a TPM woukd protect you from malware in the sense that it would prevent a malware from getting your keys, but currently the most widespread form of malware are ransomware for which a TPM can't do anything. Also attackers are rarely interested in getting your cryptographic keys, usually they are interested in getting your login details for some service, for which they use phishing