3 ms·
> Don't lose sight of the fact that the purpose of this and other TPM-like devices is to hide secrets from its owner. That's a complete misunderstanding of a T
by IncRnd 4y ago
> Don't lose sight of the fact that the purpose of this and other TPM-like devices is to hide secrets from its owner.
That's a complete misunderstanding of a TPM's security model. A TPM guards against key theft in a compromised environment by securely storing artifacts and authenticating the platform. The user doesn't enter this threat picture. It is the platform that gets authenticated, not the user.
- nyanpasu64 4y agoSafetyNet and "authenticating the platform" is used for remote attestation, so app authors can deny phones access to apps and services if they're running root/kernel-level CPU code chosen by the user (or also an attacker without access to the phone's OS signing keys) rather than by the phone's manufacturer.
- IncRnd 4y agoThat's a great example. Thanks!