Re:From stolen laptop to inside the company network
by lostmsu on Wednesday July 28, 2021 @08:31PM
(#27991439)
I find it interesting that because they used SPI sniffer, CPU memory encryption features would not have prevented the attack. Looks like all communications between PC components need to be encrypted
Re:From stolen laptop to inside the company network
by merb on Thursday July 29, 2021 @08:38AM
(#27995711)
actually tpm 2.0 can build a secure communication channel to send the key to the cpu and thus makes that a unlikely attack. of course there are many more attack vectors, but this possible one can be prevented with a correct communication channel.
https://trustedcomputinggroup.org/wp-content/uploads/TSS_ESA...
Using a tpm without such features in order to improve a disk encryption setup to the same or above that of a password is difficult and full of problems, and there are some distinct drawbacks. There is a reason why Microsoft bitlocker is primarily intended to protect a users home directory after they have provided a password. If the pin to the tpm is in clear text on the disk, and all the tpm is doing is converting that pin to a password to unlock the disk, the benefits are generally small.