Collaborate Disseminate
To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the main memory. In that case, the bootloader… Continue reading Bypassing Secure Boot in System on Chip
Context: Secure boot is one of the important elements of Trusted Computing in computer system. One variety of the Secure boot is authenticated boot. While secure boot prevent the boot of a non trusted software, the authentica… Continue reading Why authenticated boot not Secure boot?
What kind of digital / cryptographic signing would make it possible to create a camera that cryptographically signs the photos it takes so that the images can be verified to have been taken with that specific camera?
The mot… Continue reading Is a cryptographically signing camera possible?
Are secure enclaves like intel SGX protected from memory leaks? What if a non trusted privileged user dumps all the physical RAM memory. Is it possible to extract the keys in this way?
Continue reading Using keys inside a secure enclave on a non trusted hardware and OS
What are the differences between a Hardware Security Module (HSM) and a Secure Element (SE)? Can both terms be used interchangeably?
I came across various related question (TPM vs. HSM and TPM vs. SE) but the various HSM and SE definition… Continue reading What are the differences between HSM and SE?
I’m using TPM 2.0 to do a remote attestation for a computer. In order to do that you have to generate a signing key from a primary key. This generate a public key and an encrypted private key. As per the official documentatio… Continue reading Where to store signing key in TPM
The paper Trustworthy Execution on Mobile Devices: What Security Properties Can My Mobile Platform Give Me? describes 5 desired security features for mobile devices:
Isolated Execution
Secure Storage
Remote Attestation
Secu… Continue reading Extra features required for TrustZone to provide main security features
I know that keys in a TPM key hierarchy are encrypted with their parent keys. But I read that those parent keys (for instance an asymmetric SRK) need to have some symmetric secret for said encryption. Is is mandatory to encry… Continue reading Asymmetric/Symmetric Encryption of a TPM key hierarchy
The Endorsement Key (EK), the Public part, is available directly on the TPM chip, I know that you can generate an AIK key and then sign with that key, the hash must be generated by the TPM.
The idea is to execute remote atte… Continue reading Can I prove the relation between AIK and EK without asking to the TPM 2.0?
I am currently researching the capabilities of TPM in creating and storing different kinds of cryptographic keys. I know that a TPM can create and store keys for asymmetric algorithms like RSA or elliptic curves. But what abo… Continue reading Symmetric Keys for a TPM