3 ms·
It's because they don't trust the OS not to leak the decrypted bytes, but they could thanks to TPM (the OS would have to have a memory memory chunk not readable
by forty 2y ago
It's because they don't trust the OS not to leak the decrypted bytes, but they could thanks to TPM (the OS would have to have a memory memory chunk not readable from admin/root etc). In this scenario the OS is part of the DRM.
- mjg59 2y agoMicrosoft is extremely chill about admin-to-kernel privesc, so that's not a meaningful barrier.