News for hackers. Stuff that matters.

A comment on Authenticated Boot and Disk Encryption on Linux. Parent comment

Re:Authenticated Boot and Disk Encryption on Linux by infogulch on Thursday September 23, 2021 @12:13PM (#28631198)
GP already made space for this analysis by admitting a sophisticated/unsophisticated axis, thus the contrary stance of your comment is unnecessary.

You don't really make an argument on where your example should fall on that axis, which is what I would have preferred to see.

[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by kobalsky on Thursday September 23, 2021 @12:30PM (#28631460)
I think it's a fair doubt.

In this case, I don't know if sophistication could mean an evil maid attack with a breadboard and $15 worth of electronic components (which was required to break the tpm 1), or something better than what the FBI has since they struggled to unlock a terrorist's phone. I can worry about the former, and relax about the later.

I'm not an expert and when someone throws that statement with authority I'd like to know if I'm vulnerable to geek or to the CIA

[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by mnd999 on Thursday September 23, 2021 @01:39PM (#28632443)
It's certainly possible to MITM a TPM, this is why MS built all the keys into the CPU on the Xbox One[1].

[1] https://www.platformsecuritysummit.com/2019/speaker/chen/

[ Parent | on HN ]
Re:Authenticated Boot and Disk Encryption on Linux by staticassertion on Saturday September 25, 2021 @03:14PM (#28655478)
AFAIK that wouldn't be the case with TPM 2.0
[ Parent | on HN ]