3 ms·
Does the TPM limit retries or something? If it's a 4-6 digit number, you can just count upwards and try them all in a trivial amount of time.
by generalizations 4y ago
Does the TPM limit retries or something? If it's a 4-6 digit number, you can just count upwards and try them all in a trivial amount of time.
- mynameisvlad 4y agoYes. https://www.dell.com/support/kbdoc/en-us/000142311/tpm-failure-tries-recovery-time-and-lockout-recovery https://www.dell.com/support/kbdoc/en-us/000142311/tpm-failu...
- kadoban 4y ago> Does the TPM limit retries or something? Yes. TPMs have weaknesses, so this probably isn't a 100% guarantee depending on the attacker and the exact hardware, but it's pretty reliable (and very reliable if your attacker is reasonably small).
- cryptonector 4y agoIt can. TPMs have a "dictionary attack" (DA) protection feature. You can't set the number of bad attempts that trip lockout, or how long to lock out for differently for different objects -- those are global configuration parameters. But you can configure which objects / policies require DA protection and which ones don't.