Collaborate Disseminate
I am trying to learn more about trusted boot / trusted platform modules and I understand about Platform Configuration Register (PCR) values being a measurement of a ‘good’ configuration signed by a key locked from access within the TPM chi… Continue reading With TPM how are the initial PCR values seeded with ‘good’ values?
Imagine having a device that has a TPM (Trusted Platform Module). This TPM is used to store keys. Some of these keys are sealed to PCR constraints, meaning that they can only be opened if the PCRs have certain values, i.e. the values they … Continue reading TPM – Device Softwareupdate – What happens to my sealed key?
Let’s say I have an application that requires certificates (HTTPS, MQTTs, etc.) due to the use of TLS. I’m planning to build my own tier-1 PKI hierarchy with my own company CA signing device certificates. One of our products … Continue reading Use TPM 1.2 to store the private key of a certificate
The Wikipédia’s TEE entry mentions a hardware technology called Silent Lake that can support TEE implementations:
The following embedded hardware technologies can be used to support
TEE implementations:
I’m kinda unclear and confused ,i’m searching on the subject of trusted module platform and i can resume the main tpm’s functions are: authentication functions, integrity measurement functions and attestation functions.
I’m a little unclear on this (marked strong):
“The public key authentication functions provide for on-chip key pair generation using a hardware
random number generator, along with public key signature, verification, encrypti… Continue reading TPM with the three main groups of functions
The primary scope of TPM is to assure the integrity of a platform. In
this context, “integrity” means “behave as intended”. ~Wiki
I’m learning more about how the TPM performs integrity covering aspects as root of trust, chain of tru… Continue reading How does the TPM provide security for the cloud?
I have been learning about securing the OS and don’t understand how to do so, how secure it is and if it can verify the integrity of a system that could have possibly been compromised (ruling out the system being compromised)… Continue reading Secure boot to the OS flash drives/CD for bootloader signature verification and TPM/UFEI signing
When using a TPM to provide integrity measurements for a system via SRTM, the trusted computing base is reduced to only the TPM and CRTM. The CRTM is a component of the BIOS (specifically the bootblock) which executes first and allows the … Continue reading Verifying that the CRTM is read-only for the purpose of trusted computing
It’s said that TPM is proposed to address issues that software alone cannot. To my understanding, this means TPM cannot be simulated using software. For example, as far as I know, TPM comes with a hardware-based random number… Continue reading Distinguishing features of TPM from software solutions