4 ms·
> but what stops an attacker from simply wiring up the TPM directly, generating a new key pair, and storing that instead Simply? Did you just equate resetting
by noja 3y ago
> but what stops an attacker from simply wiring up the TPM directly, generating a new key pair, and storing that instead
Simply?
Did you just equate resetting a bios password with wiring up a TPM and generating a new key pair?
- mjg59 3y agoThe situation we're discussing already involves taking the machine apart to short the security eeprom during boot. Once you've accepted physical attacks as part of your threat model it seems reasonable to say that any mitigations you're designing should be resilient to physical attacks as well.