The Trusted Platform Module
summary
Explains that the TPM is an API spec spanning thousands of pages implemented as discrete chips or fTPM on CPU, and shows live interaction using a Go package that opens /dev/tpm0. States concrete limits: RSA sign latency ~300–400 ms, ECDSA much faster; TPMs store keys, support credential activation and EK certificates but manufacturers rarely supply platform certs. Details PCR/event log attestation, a real CVE where event types were omitted from digests, BitLocker binding to PCRs 7 and 11, and cloud vendor TPM APIs.
AI-written summary · about
chapters (8)
- 0:00Introduction and speaker intro
- 1:28TPM basics and background
- 5:37Storing keys in TPM
- 8:24TPM key attestation
- 13:20Boot state and PCRs
- 19:24Disk encryption with TPM
- 22:55Linux and TPM integration
- 27:29Summary and Q&A
related talks
33mfTPM: A Software-Only Implementation of a TPM Chip
28mThe TPM as an everyday security tool
42mTPM based attestation - how can we use it for good?
46mTPM in TEE
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
25mOverview and Recent Developments: TPM
39mTPM Is No Silver Bullet: Pitfalls in Embedded Device Security
15mUsability and Security of Trusted Platform Module (TPM) Library APIs