News for hackers. Stuff that matters.

A comment on TCG TPM2.0 implementations vulnerable to memory corruption. Parent comment

Re:TCG TPM2.0 implementations vulnerable to memory corruption by gjsman-1000 on Tuesday February 28, 2023 @09:13PM (#34977903)
TPM 2.0 first appeared on the market in 2014. Rust first appeared in 2015. And Rust took a while to become a mature system. TPM 2.0 was also an improved version of TPM 1.2, which came out in 2009.

So... maybe if Rust was a decade earlier.

[ Parent | on HN ]
Re:TCG TPM2.0 implementations vulnerable to memory corruption by mcint on Tuesday February 28, 2023 @09:35PM (#34978058)
Announced then, sure, that's a fine cutoff date. It did show clear promise before then in servo.

Rust can still be a standard going forward.

Better tools, better programs, Rust lang.

[ Parent | on HN ]
Re:TCG TPM2.0 implementations vulnerable to memory corruption by amluto on Wednesday March 01, 2023 @04:18AM (#34980329)
For something like TPM, IMO, using a memory safe architecture should be table stakes nowadays. I would go further: the design should be as simple as possible to achieve its requirements, and the implementation should be formally verified.
[ Parent | on HN ]