Re:Self hosting is important
by KirillPanov on Saturday July 24, 2021 @11:49AM
(#27941888)
What was the most popular TPM chip for many years had a broken RSA key generator. It produced private keys that could be cracked with $76 worth of computing power:
It is really hard to see this as anything other than a bugdoor.
My laptop has this TPM chip. I am really glad I never used it, and even went so far as to disable support for it when I built my coreboot image.
Products sold with the buzzword "trusted" are a magnet for this sort of garbage. They've painted a "please bugdoor me" target on their back. The only thing you can hope to trust is general-purpose computing devices, with a large market, that obey their owner. Unfortunately it is increasingly difficult to find those.
https://www.bleepingcomputer.com/news/security/tpm-chipsets-...
https://crocs.fi.muni.cz/public/papers/rsa_ccs17
It is really hard to see this as anything other than a bugdoor.
My laptop has this TPM chip. I am really glad I never used it, and even went so far as to disable support for it when I built my coreboot image.
Products sold with the buzzword "trusted" are a magnet for this sort of garbage. They've painted a "please bugdoor me" target on their back. The only thing you can hope to trust is general-purpose computing devices, with a large market, that obey their owner. Unfortunately it is increasingly difficult to find those.