TPM Software Stack - Enabling the TPM2.0 Ecosystem in Linux
summary
TPM2.0 userspace becomes a usable Linux ecosystem: kernel drivers land in v4.0 and embedded support in v4.9, a resource manager moves partly into the kernel, and a community-backed TPM2 Software Stack adds eSAPI and a OpenSSL engine. tpm2-tools provide command-line prototyping, Windows TBS support and UEFI TCTI arrive, CI yields ~85% test coverage, a June release modernizes APIs, and a PKCS#11 provider exists as a beta for integration work.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 0:33Who are we
- 1:48Who has used the TPM
- 4:08How is the design coming up
- 7:30Architecture
- 12:37System API
- 14:09Enhance System API
- 17:20TPM Implementation
- 19:28Resource Management
- 21:20How we got here
- 27:51GitHub
- 29:14Time Freedom
- 30:09Use Cases
- 31:02CPM2 Tools
- 31:47CPM2 Education
- 32:25CPM2 Example
- 33:17OpenSSL Engine
- 33:51OpenSSL Demo
- 34:25KCS11 Provider
- 35:05Wrapup
related talks
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
40mGetting Started with the TPM2 Software Stack (TSS2)
23mTPM
51mApplications of TPM 2.0
46mTPM in TEE
11mSubsystem Update: tpm2-Software Update and Highlights
51mSecuring Embedded Linux Systems with TPM 2.0
43mTPMs and the Linux Kernel: unlocking a better path to hardware security
