mkukri.xyz personal blog

TPM GPIO fail: How bad OEM firmware ruins Intel TPM security

In this article I demonstrate a software only attack that allows an operating system to set the PCRs of a discrete TPM device to arbitrary values and unseal any secret that uses a PCR based sealing policy (such as disk encryption keys used by unattended unlock TPM FDE schemes).
Points
189
HN comments
132
Submissions
1
Cited by
0 commenters

Security & PrivacyHardware & Electronics2024

On Hacker News

SubmittedTitle on HNPointsComments
Jun 6, 2024TPM GPIO fail: How bad OEM firmware ruins Intel TPM security by osks189132

Related posts from the same era