Questions tagged [tpm]
A Trusted Platform Module (TPM) is a secure co-processor found in some PC-type computers that provides cryptographic operations and system integrity measurements.
7
questions
4
votes
0
answers
77
views
TPM - Ecc based encryption / decryption using the public key
Our device comes with a device certificate which was signed with our private registration authority (CA). The private key (type ECC) was generated on the device itself - to be more specific directly ...
- 766
1
vote
2
answers
142
views
How are RSA and Elliptic Curve keys generated deterministically?
Going through the TPM tutorial: https://google.github.io/tpm-js/#pg_keys
The output of KDF would be some pseudo-random bytes. For RSA, the bytes might not be a prime number. For elliptic curves, the ...
- 87
1
vote
2
answers
186
views
Secure storage of encryption key in offline device
I'm developing a device where I need to store a symmetric key that the customer uploads to the device.
The device is offline at all times, so centralized storage in HSM is not an option.
The device ...
- 11
1
vote
0
answers
137
views
How web browsers and WebCrypto API protects secrets
I tried to search and take a look at a way to securely generate or import secret keys on client-side. First I tried to see if it is possible to take advantage of TPM in Windows but as far as I ...
- 43
2
votes
1
answer
316
views
What is the advantage of AES key wrap as opposed to adding a random nonce?
I'm interested in methods of wrapping an AES DEK (Data Encryption Key) using AES KEK (Key Encryption Key). Is there an advantage to using AES key wrap as defined in RFC 3394 as opposed to simply ...
- 41
0
votes
1
answer
240
views
SPI Frame format of TPM1.2 Commands
I have bought a TPM Chip: SLB9670.
It can be communicated via the SPI Bus.
What is the SPI frame format for firing TPM Commands with or
without arguments. I have read the TPM Main Specifications ...
9
votes
2
answers
669
views
What is TPMFail attack and what are the countermeasures?
Trusted Platform Module (TPM) is designed as a hardware-based root of trust to protect cryptographic keys even against system based adversaries.
Although Intel's firmware based fTPM has FIPS 140-2 ...
- 46.5k