Collaborate Disseminate
I recently read about PC/Desktops which come with TPM chips which are used for remote attestation.
So following are my questions:
Does any Android smartphone come with a TPM chip?
Is there any way for a service provider to… Continue reading Is there any mechanism available in Android platform for remote attestation?
I am interested in ‘adding’ preexisting keys to a TPM’s storage hierarchy.
An example of a desired key hierarchy can be shown as:
(SRK)—–>(User Storage Key)——-> User Working Key 1
|
… Continue reading Can TPM "Storage Keys" be created outside the TPM?
I am reading up on TEE in ARM. I am looking for pointers for the following questions:
How does the TEE load code from the OS securely and guarantee that its not malicious code?
I am guessing the code is signed and the TEE can verify the… Continue reading Loading code securely in the Trusted Execution Environment (ARM)
How can I use a TPM chip along with the OpenSSL FIPS Object Module without modifying OpenSSL FIPS Object Module (to avoid Private Label certification)?
Should we add an engine interface in OpenSSL module as well in OpenSSL F… Continue reading TPM support with OpenSSL FIPS Object Module
One of the extremely valuable functions of a Trusted Platform Module (TPM) chip is its ability to seal a private key under the hash of the code that will use it. This means that one can create a private key which can only be read by a a pi… Continue reading Does the ARM TrustZone technology support sealing a private key under a code hash?
I have been experimenting with the TPM on a Dell R710 (BIOS version 6.3.0). My goal was to detect changes to BIOS settings through TPM PCRs. The research I have done leads me to believe that BIOS configuration changes should be reflected … Continue reading TPM PCR value unchanged with BIOS configuration changes
I am currently looking at TPM (Trusted Platform Module) and wondering how does TPM offer platform authentication. Suppose a legal host is deployed on the cloud. How do I use TPM to assure that the host I am connecting to is that very host,… Continue reading How to use TPM to perform platform authentication?
From my understanding of Intel TXT, the technology can be used to put the processor in a trusted state where measurements can be performed. My understanding looks something like this, where I believe TBoot is typically used t… Continue reading What prevents the Intel TXT boot loader from being maliciously altered?
While it is theoretically possible to thoroughly examine the source code of Open Source Software to check for backdoors (neglecting a Ken Thompson hack), and given sufficiently adequate knowledge in Electrical Engineering one… Continue reading How to trust ICs?
In many cases where a Trusted Platform Module (TPM chip) is employed, it is soldered directly onto the motherboard. Ostensibly the motherboard manufacturer is then solely responsible for integrating the BIOS and TPM module, and the overall… Continue reading Trusted Platform Module, daughterboard vs onboard TPM?