3 ms·
Couldn't they just store keys and decrypt instructions using something like a Trusted Platform Module?
by allemagne 12y ago
Couldn't they just store keys and decrypt instructions using something like a Trusted Platform Module?
- AnthonyMouse 12y agoThere are a couple of problems with that. The first is that many devices don't have a TPM and there is no point in bothering if using it is optional. The second, and this is the one that kills half the stuff people think a TPM would be good for, is that it assumes every TPM implementation everywhere is secure. Reverse engineer finds one device with one vulnerability and you lose. Someone who finds a vulnerability doesn't even need to disclose what it is so you can fix it, they just start selling TPM keys for Bitcoin that anyone can use to emulate a device with a TPM.
- MichaelGG 12y agoTPMs have already been broken, Christopher Tarnovsky showed that for some Infineon TPM. I find it suspect that Lenovo, for instance, is making sure they have truly hardened TPMs. Even dedicated HSMs like the Chrysalis Luna CA3 (I own one) have been broken: http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-592.pdf http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-592.pdf