TCG inside?: a note on TPM specification compliance

The Trusted Computing Group (TCG) has addressed a new generation of computing platforms employing both supplemental hardware and software with the primary goal to improve the security and the trustworthiness of future IT-Systems. The core component of the TCG proposal is the Trusted Platform Module (TPM) providing certain cryptographic functions. Currently, different instantiation of the TPM specification are available as chips placed on the mainboard of the underlying platform. In practice different manufacturers may implement TPM differently: they may exploit the flexibility that the specification itself provides, or they may deviate from the specification by inappropriate design that might lead to security weaknesses. Many vendors currently equip their platforms and devices with TPM claiming to be TCG compliant. However, there is no feasible way for users of these systems to verify this fact. Further, in the near future many applications may use TPM functionalities and need to rely...

• Type: Conference
• Year: 2006
• Where: CCS
• Authors: Ahmad-Reza Sadeghi, Marcel Selhorst, Christian Stüble, Christian Wachsmann, Marcel Winandy
• Keywords: CCS 2006, Security Privacy, TPM Functionalities, TPM Implementations, TPM Specification