4 ms·
> The use of a discrete (physical) TPM actually decreases the security of the system, using a fTPM would solve the problem. Since only dTPM can be FIPS certifi
by ExoticPearTree 3y ago
> The use of a discrete (physical) TPM actually decreases the security of the system, using a fTPM would solve the problem.
Since only dTPM can be FIPS certified, I don't see how an uncertifiable piece of hardware can be more secure.
- monocasa 3y agoBecause security isn't certifications.
- ongy 3y agoFIPS certification doesn't make something more secure. Just more certified. It's incredibly slow to adapt to new technology. fTPM has a different attack surface, and protects against this specific attack. It's most likely better than dTPM for hardware based attacks, but there's known attacks as well