On 11/16/2014 11:18 AM, David Li wrote: > > A Perhaps related topic that I often find people asking is: "How do you > trust the TPM itself given today's global economy?". There is one school > of thought that regards the TPM as totally untrustworthy. Another thinks > it's trusted to some degree. The debate seems never ending without a > clear answer. > > I am curious about what experts on this list think of this issue.
Since we're engineers, can you provide references for the "totally untrustworthy" research? I've seen some papers on errors in the old 1.1b TPMs, before there were good test suites. I've also seen some research attacking the infrastructure, generally hardware attacks that the TCG doesn't claim to protect against. I haven't seem any research at all concluding that the TPM is totally untrustworthy. ------------------------------------------------------------------------------ Comprehensive Server Monitoring with Site24x7. Monitor 10 servers for $9/Month. Get alerted through email, SMS, voice calls or mobile push notifications. Take corrective actions from your mobile device. http://pubads.g.doubleclick.net/gampad/clk?id=154624111&iu=/4140/ostg.clktrk _______________________________________________ TrouSerS-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/trousers-users
