3 ms·
Relying on an TPM to rate-limit an attacker's ability to brute-force a comically short PIN and get the encryption key (Microsoft's promoted way to login to a Wi
by nyanpasu64 3y ago
Relying on an TPM to rate-limit an attacker's ability to brute-force a comically short PIN and get the encryption key (Microsoft's promoted way to login to a Windows device), is less secure (once the TPM is exploited) than relying on the attacker to guess a high-entropy password to get the encryption key.
- cryptonector 3y ago> once the TPM is exploited This is not addressing my question. It's not the TPM that's exploited but the SP. If the SP is compromised then the whole host is compromised.