3 ms·
has anyone ever explained why TPM 2.0 is so much better than TPM 1.2 on Windows 11? What can't Microsoft do securely with 1.2 that it can with 2.0? I'm not ask
by wnevets 2y ago
has anyone ever explained why TPM 2.0 is so much better than TPM 1.2 on Windows 11? What can't Microsoft do securely with 1.2 that it can with 2.0?
I'm not asking what 2.0 does better than 1.2, I am asking why is it a must have.
- p_ing 2y agoThere are major differences between the two, including cryptography used, outlined on the Wikipedia article - https://en.wikipedia.org/wiki/Trusted_Platform_Module#Version_differences https://en.wikipedia.org/wiki/Trusted_Platform_Module#Versio.... 2.0 is required for Microsoft's purposes. Here's one of them: https://learn.microsoft.com/en-us/windows/security/hardware-security/tpm/tpm-fundamentals#tpm-20-anti-hammering https://learn.microsoft.com/en-us/windows/security/hardware-...
- bangaladore 2y agoThe TPM spec is somewhat interesting in that many fundamental capabilities (or at least you would think) are optional. 2.0 enforces some more capabilities and/or adds more capabilities. That's at least one part of it.
- kbolino 2y agoTPM 1.2 is only guaranteed to support SHA-1. That was a baffling inadequacy when it came out in 2011, proven so just a few years later when SHA-1 was publicly broken in 2017. This makes TPM 1.2 useless for its intended purpose. TPM 2.0 is guaranteed to support SHA-256.