Overview and Recent Developments: TPM
summary
Short overview of the TPM subsystem and claim that TPM 2.0 adoption is replacing TPM 1.x. Kernel work over the past 12 months adds validation against buffer underruns/overruns, UEFI event log support (copying the EFI table before ExitBootServices), higher-resolution polling and non-blocking self test, and performance fixes to tpm_tis. Describes the TPM Genie vulnerability and a proposed countermeasure that establishes an encrypted authenticated channel between host and TPM using exchanged public keys and salted session keys, noting this only protects the bus.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:18Overview
- 2:54Remote attestation
- 3:33Development history
- 4:29Highlights
- 5:42Event Lock
- 7:36Burner
- 8:44Whitepaper
- 9:09Protection
- 11:32Questions
related talks
23mTPM
39mTPM Is No Silver Bullet: Pitfalls in Embedded Device Security
42mRecent TPM Security Enhancements to the Linux Kernel
51mSecuring Embedded Linux Systems with TPM 2.0
28mThe TPM as an everyday security tool
51mApplications of TPM 2.0
29mThe Trusted Platform Module
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux