▲ 737 ▼ BitLocker encryption broken in less than 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM (www.tomshardware.com) submitted 2 years ago by throws_lemy@lemmy.nz to c/technology@lemmy.world 69 comments fedilink hide all child comments
[–] phoenixz@lemmy.ca 15 points 2 years ago (2 children) CPU communicates with TPM in plaintext Because of course permalink fedilink source parent hideshow 4 child comments replies: [–] Eufalconimorph@discuss.tchncs.de 7 points 2 years ago (1 child) CPU doesn't have any secure storage, so it can't encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage. permalink fedilink source parent hideshow 2 child comments replies: [–] baseless_discourse@mander.xyz 2 points 2 years ago That make sense, CPU has no place to store private keys, since that is the functionality of TPM... Unless there is a firmware solution, which defeats the purpose of a standalone tpm. permalink fedilink source parent [+] baseless_discourse@mander.xyz 1 point 2 years ago* (last edited 2 years ago) [deleted] permalink fedilink source parent
[–] Eufalconimorph@discuss.tchncs.de 7 points 2 years ago (1 child) CPU doesn't have any secure storage, so it can't encrypt or authenticate comms to the TPM. The on-CPU fTPMs are the solution, the CPU then has the secure storage. permalink fedilink source parent hideshow 2 child comments replies: [–] baseless_discourse@mander.xyz 2 points 2 years ago That make sense, CPU has no place to store private keys, since that is the functionality of TPM... Unless there is a firmware solution, which defeats the purpose of a standalone tpm. permalink fedilink source parent
[–] baseless_discourse@mander.xyz 2 points 2 years ago That make sense, CPU has no place to store private keys, since that is the functionality of TPM... Unless there is a firmware solution, which defeats the purpose of a standalone tpm. permalink fedilink source parent
[+] baseless_discourse@mander.xyz 1 point 2 years ago* (last edited 2 years ago) [deleted] permalink fedilink source parent