News for hackers. Stuff that matters.

A comment on TPM GPIO fail: How bad OEM firmware ruins Intel TPM security. Parent comment

Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by transpute on Thursday June 06, 2024 @11:51AM (#40598877)
> discrete TPMs don't really have a future in systems that need robust system state attestation (both local and remote) against attackers with physical access. TPMs should be integrated into the CPU/SoC

What are your thoughts on Microsoft Pluton and Google OpenTitan as TPM alternatives/emulators?

Should system attestation roots of trust be based on open-source firmware?

Recent AI/Copilot PCs based on Qualcomm SDXE/Oryon/Nuvia, AMD Zen5 and Intel Lunar Lake include Microsoft Pluton.

[ Parent | on HN ]
Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by kukrimate on Thursday June 06, 2024 @11:58AM (#40598975)
> What are your thoughts on Microsoft Pluton and Google OpenTitan as TPM alternatives/emulators?

I am not familiar enough of the technical details of Pluton or OpenTitan to make a meaningful statement on their security.

> Should system attestation roots of trust be based on open-source firmware?

Yes, and not only root of trusts, I am strong believer in open source firmware in general. I have been developing coreboot as a hobby for a long time. I wish their was more industry support for such things, especially at the lowest levels of modern systems.

[ Parent | on HN ]
Re:TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by transpute on Thursday June 06, 2024 @04:14PM (#40601853)
Microsoft has supported open firmware for OCP Caliptra RoT, https://news.ycombinator.com/context?id=40131126

Hopefully we will see open firmware on some version of Pluton, https://news.ycombinator.com/item?id=40554658

[ Parent | on HN ]