Lee Duna@lemmy.nz to Technology@lemmy.worldEnglish · 9 months agoBitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPMwww.tomshardware.comexternal-linkmessage-square68fedilinkarrow-up10arrow-down10
arrow-up10arrow-down1external-linkBitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPMwww.tomshardware.comLee Duna@lemmy.nz to Technology@lemmy.worldEnglish · 9 months agomessage-square68fedilink
minus-squarePhoenixz@lemmy.calinkfedilinkEnglisharrow-up0·9 months ago CPU communicates with TPM in plaintext Because of course
minus-squareEufalconimorph@discuss.tchncs.delinkfedilinkEnglisharrow-up0·9 months agoCPU doesn’t have any secure storage, so it can’t encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage.
minus-squarebaseless_discourse@mander.xyzlinkfedilinkEnglisharrow-up0·9 months agoThat make sense, CPU has no place to store private keys, since that is the functionality of TPM… Unless there is a firmware solution, which defeats the purpose of a standalone tpm.
Because of course
CPU doesn’t have any secure storage, so it can’t encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage.
That make sense, CPU has no place to store private keys, since that is the functionality of TPM…
Unless there is a firmware solution, which defeats the purpose of a standalone tpm.