Beyond Anti Evil Maid

Recommendations

Info

An untrustworthy kernel could just lie…
Remote Attestation
Page 1: Beyond Anti Evil Maid Protecting ha
Page 4 and 5: When do you trust your computer?
Page 6 and 7: Can the software asking for your pa
Page 8 and 9: Can the bootloader that loaded the
Page 10 and 11: Can the CPU executing the firmware
Page 12 and 13: Trusted Platform Module (TPM)
Page 14 and 15: SHA1 of next boot component
Page 16 and 17: PCR N = SHA1(PCR O ||hash)
Page 18 and 19: Break SHA1
Page 20 and 21: Perform exactly the same sequence o
Page 24 and 25: Cryptographic communication between
Page 26 and 27: Need to trust remote machine
Page 28 and 29: How does the remote machine communi
Page 30 and 31: TPMs can control data release based
Page 32 and 33: Data is encrypted with a TPM-specif
Page 34 and 35: TPM decrypts blob. If PCRs don’t
Page 36 and 37: (Someone can still steal your lapto
Page 40 and 41: User has no way of knowing whether
Page 42 and 43: Joanna Rutkowska
Page 44 and 45: Print during boot process or store
Page 46 and 47: Problems:
Page 48 and 49: If booted from USB, relies on user
Page 50 and 51: Exposing the secret is suboptimal
Page 52 and 53: Shared secret with dynamic componen
Page 54 and 55: Time-based One-Time Passwords
Page 56 and 57: Well understood by users
Page 58 and 59: Print a QR code, allow user to enro
Page 60 and 61: If number on phone matches, safe to
Page 62 and 63: Secret exists in RAM
Page 64 and 65: (Still disabled on many free OSes)
Page 66 and 67: TPM keys can be restricted to PCR s
Page 68 and 69: Verify that signature matches
Page 70 and 71: Generate key outside the TPM, impor
Page 72 and 73:
Simplicity is a virtue
Page 74 and 75:
Access to GPIO pins can be restrict
Page 76 and 77:
If LED lights up, system is good
Page 78 and 79:
NFC communication between TPM and d
Page 80 and 81:
What attacks are we always vulnerab
Page 82 and 83:
Attacking the TPM itself
Page 84 and 85:
Incremental improvements in securit
show all

Beyond Anti Evil Maid

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?