News for hackers. Stuff that matters.

A comment on TPM Sniffing. Parent comment

Re:TPM Sniffing by ohazi on Thursday November 18, 2021 @02:29AM (#29262986)
Wow, I didn't realize they still relied on a golden-key style root of trust... I assumed they were trust on first use. That seems pretty bad!
[ Parent | on HN ]
Re:TPM Sniffing by cryptonector on Thursday November 18, 2021 @03:08AM (#29263230)
You can do trust on first use. Just... throw away the EK certificate and just trust the EK's public key. After all, you have physical access to the chip and... you trust your supply chain, right?
[ Parent | on HN ]