2 ms·
> Why would I use a TPM to store a shared secret? I don't understand your incredulity at this; a disk encryption key is a shared secret and commonly stored in
by eqvinox 1y ago
> Why would I use a TPM to store a shared secret?
I don't understand your incredulity at this; a disk encryption key is a shared secret and commonly stored in a TPM. It kinda still makes sense because the TPM 'enforces' platform security.
But a TPM isn't the same as a hardware token, and storing a shared secret on a hardware token does make less sense. But that doesn't prevent people from doing it...
- flowerthoughts 1y ago> a disk encryption key is a shared secret and commonly stored in a TPM. Thinking some more about this, you're right. If the stored shared secret is high entropy, and the user might choose a weak password, then using the TPM as a defense against password cracking is a useful reason for the seeming indirection. That assumes the TPM can e.g. rate limit extraction attempts and not be foiled by power-loss or sped up oscillators or similar externalities.