Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754543AbYHMOqA (ORCPT ); Wed, 13 Aug 2008 10:46:00 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1751449AbYHMOpv (ORCPT ); Wed, 13 Aug 2008 10:45:51 -0400 Received: from bombadil.infradead.org ([18.85.46.34]:50515 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750957AbYHMOpu (ORCPT ); Wed, 13 Aug 2008 10:45:50 -0400 Date: Wed, 13 Aug 2008 10:45:48 -0400 From: Christoph Hellwig To: Alan Cox Cc: Kenneth Goldman , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [PATCH 1/4] integrity: TPM internel kernel interface Message-ID: <20080813144548.GA9157@infradead.org> References: <20080812223636.1aff373a@lxorguk.ukuu.org.uk> <20080813144040.30d40ec5@lxorguk.ukuu.org.uk> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20080813144040.30d40ec5@lxorguk.ukuu.org.uk> User-Agent: Mutt/1.5.18 (2008-05-17) X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1171 Lines: 27 On Wed, Aug 13, 2008 at 02:40:40PM +0100, Alan Cox wrote: > > "goodies", the TCG technology does not protect against hardware > > attacks such as replacing the TPM with a bogus device, replacing the > > CRTM hardware, flashing the CRTM using a JTAG cable, lifting a TPM pin> > > and asserting reset, using a JTAG cable to set breakpoints and alter > > memory, etc. > > > > For this use case, the attack model is a remote, software attack. The> > > user is not considered the attacker. > > Surely if I can replace your TPM with alternative hardware then I can > also replace it with virtualised software traps. Yes, which in fact is what most people working on TPM support use because the real hardware is just too slow :) > [If there is a good document on this btw please just point me there > instead and I'll go read further] I recommend this one: http://www.few.vu.nl/~srijith/publications/confs/sws07-final.pdf :) -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/