AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defeating Disk Encryption

Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by riedel on Tuesday May 02, 2023 @12:51PM (#35790483)

Stupid question: was there no responsible disclosure and is there no cve assigned? Seems like a rather practical attack (or am I missing something?

Do the researchers consider it a known fact that that fTPM is broken by design and thus do think that nobody will get hurt? It would make sense to require an additional passphrase on fTPM devices for bitlocker. Was there a statement from Microsoft or AMD?

[ Parent | on HN ]

Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by hnj2 on Tuesday May 02, 2023 @01:09PM (#35790818)

From the paper: "All security-relevant findings discussed in this paper were responsibly disclosed to AMD, Microsoft, and the systemd-cryptenroll maintainers. The systemd-cryptenroll maintainers quickly got back to us to discuss specific mitigation strategies."

[ Parent | on HN ]

Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by riedel on Tuesday May 02, 2023 @09:17PM (#35796504)

Thx. I overlooked this part. So AMD and Microsoft simply ignored it and leave customers unprotected. Wow.

[ Parent | on HN ]