TPM
summary
TPM 2.0 support is landing in the kernel with concrete work: moved from misc to a dedicated device, a growing patch set (big spike for TPM 2.0 in 4.0) and added virtual TPM support exposing per-instance file descriptors to userland. New features handled: algorithm agility, policy‑based auth, symmetric crypto in the API. Planned kernel work builds an internal access broker that creates isolated root and per‑session contexts, virtualizes transient handles via a shared memory mapping and uses TPM save/load commands so session swapping works without a heavyweight daemon.
AI-written summary · about
chapters (9)
- 0:00TPM role and growth
- 1:13TPM history and 1.2
- 2:05TPM 2.0 features
- 3:24Linux TPM subsystem status
- 4:43Recent technical work
- 7:56Driver and hardware updates
- 8:41Future developments
- 11:03Internal access broker plan
- 17:38Implementation details and QA
related talks
25mOverview and Recent Developments: TPM
36mTPM Software Stack - Enabling the TPM2.0 Ecosystem in Linux
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
51mApplications of TPM 2.0
42mRecent TPM Security Enhancements to the Linux Kernel
43mTPMs and the Linux Kernel: unlocking a better path to hardware security
28mThe TPM as an everyday security tool
42mTPMs and the Linux Kernel: unlocking a better path to hardware security