4 ms·
Most TPM chips are unaffected. Those that are will get new firmware. Virtual TPMs are affected because those are implemented using a TPM simulator based on th
by cryptonector 4y ago
Most TPM chips are unaffected. Those that are will get new firmware. Virtual TPMs are affected because those are implemented using a TPM simulator based on the TCG code that has this bug. In all cases any compromise should be of the local host, not of other things unless those things are accessed using keys stored on the affected TPM. In any affected cases where the TPM can be replaced then the simplest recovery method starts with replacing the TPM and rebuilding the host then re-running any enrollment protocols that need to be re-run, otherwise flashing a compromised TPM while running on a system that can have been rootkitted is a problem.
- ls612 4y agoBy virtual TPM you mean the implementation on modern Intel and Ryzen platforms in the cpu correct? If so does that mean that a firmware/bios/microcode update will be able to patch the vulnerability on those machines?
- d18g 4y agoI would not assume so as these are firmware implementations and as such would not use the simulator directly edit: also look at the link you can see clearly that Intel is not effected but AMD is unknown...
- cryptonector 4y agoNo, I mean a swtpm running in a hypervisor and presented to a VM as a discrete TPM.