alt Hacker NewsThat's fair, although aren't most TPMs nowadays fTPMs? No interceptable communication that way.
Replies
nextaccountic • yesterday at 4:59 AM
what about faulTPM? https://arxiv.org/abs/2304.14717
That's fair, although aren't most TPMs nowadays fTPMs? No interceptable communication that way.
what about faulTPM? https://arxiv.org/abs/2304.14717
Until they require fTPMs, an attacker can just choose to use a regular TPM.
A more sophisticated attacker could plausibly extract key material from the TPM itself via sidechannels, and sign their own attestations.