6 ms·
I wonder if there’s any room for a manufacturer that would make an untrusted TPU. Like, one that quacks like a TPU, but has will sing like a bird if you ask for
by teeray 2y ago
I wonder if there’s any room for a manufacturer that would make an untrusted TPU. Like, one that quacks like a TPU, but has will sing like a bird if you ask for its keys. Violates all of the security guarantees? Yep, you bet. But it does provide some insurance against an industry that might want to use TPUs against us (e.g. DRM).
- xmodem 2y agoYou can install Windows 11 into a virtual machine with a virtual TPM, and it will detect and use the vTPM the same as it would a physical TPM on real hardware.
- Mindwipe 2y agoAs has been pointed out here before, this is all TPUs. They are not used by DRM vendors because they are quite bad at stopping people with physical access getting the keys.
- matt_heimer 2y agoMost of the systems would also fail the min CPU check.
- Avamander 2y agoSuch a manufacturer's attestation key would quickly be considered untrustworthy and their TPMs unattested. An unattested TPM will be ignored by any DRM or anti-cheat use-cases.