TPM GPIO fail: How bad OEM firmware ruins Intel TPM security

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by patmorgan23 on Thursday June 06, 2024 @08:05AM (#40596430)

TPM isn't just for secure boot. Windows utilizes it for Bitlocker full disk encryption.

It's just not widely used for other applications.

[ Parent | on HN ]

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by cryptonector on Thursday June 06, 2024 @12:37PM (#40599453)

That's still essentially part of the boot process. You can't use dTPMs as HSMs for TLS or whatever because dTPMs are way too slow.

[ Parent | on HN ]

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by sim7c00 on Monday June 10, 2024 @05:00AM (#40631551)

Thanks, that's interesting. as commenter noted i'd say this is part of the boot-process, but you are right, it's not technically secure boot related. booting securely != secure boot that's correct :)

[ Parent | on HN ]