News for hackers. Stuff that matters.

A comment on AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defeating Disk Encryption. Parent comment

Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by halJordan on Tuesday May 02, 2023 @05:02PM (#35794166)
It's because tpms are small and have small storage. The outrageous "its a secret cabal" voices are a prime example of what people cook up when faced with something they cant explain due to ignorance but feel the need to have an answer. Its as outrageous as a Republican saying "Q did it."
[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by Dylan16807 on Tuesday May 02, 2023 @05:24PM (#35794426)
Wondering if something was requested by law enforcement isn't implying a cabal, chill.

Also a couple kilobytes of flash costs basically nothing. And you could hash keys over a certain length, which is much better than having such a short limit on a human-typed string.

[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by bootsmann on Wednesday May 03, 2023 @02:55AM (#35798978)
A couple of kilobytes of flash also doesn't come with the protections the tpm offers (or at least is supposed to offer, considering the article in the OP)
[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by salawat on Tuesday May 02, 2023 @06:02PM (#35794838)
If you'd like to provide schemata, open standards and source code for them, then don't keep the class waiting.

Don't/can't? Then you're a fool trusting someone else to do something you yourself cannot inspect. Then again, most people seem to be oddly fine with that. I am not of that number.

[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by intelVISA on Tuesday May 02, 2023 @06:16PM (#35794964)
as a 1337 pwn3r the TPMs are fine

source: just trust me bro

[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by jasonjayr on Tuesday May 02, 2023 @10:05PM (#35796850)
Sure they are small little embedded chips, supposedly physically hardened from tampering.

but argon2($string_of_any_length) should produce a fixed-length byte string, no?

[ Parent | on HN ]
Re:AMD's Firmware TPMs Vulnerable to Hardware Attacks, Defea... by LawTalkingGuy on Wednesday May 03, 2023 @07:24PM (#35809207)
And if they aren't using such a password library, what other errors are likely?

Timing attack on the character of the pw which failed?

[ Parent | on HN ]