Re:TCG TPM2.0 implementations vulnerable to memory corruption
by gjsman-1000 on Tuesday February 28, 2023 @09:13PM
(#34977903)
TPM 2.0 first appeared on the market in 2014. Rust first appeared in 2015. And Rust took a while to become a mature system. TPM 2.0 was also an improved version of TPM 1.2, which came out in 2009.
So... maybe if Rust was a decade earlier.
Re:TCG TPM2.0 implementations vulnerable to memory corruption
by mcint on Tuesday February 28, 2023 @09:35PM
(#34978058)
Announced then, sure, that's a fine cutoff date. It did show clear promise before then in servo.
Rust can still be a standard going forward.
Better tools, better programs, Rust lang.
Re:TCG TPM2.0 implementations vulnerable to memory corruption
by amluto on Wednesday March 01, 2023 @04:18AM
(#34980329)
For something like TPM, IMO, using a memory safe architecture should be table stakes nowadays. I would go further: the design should be as simple as possible to achieve its requirements, and the implementation should be formally verified.
If nothing else, arguing about "unsafe" between managers, or even lawyers, between orgs, would be fruitful in new ways.