Beyond Anti Evil Maid

Recommendations

Info

When do you trust your computer?
Your computer must be trusted before you enter any secrets
Page 1: Beyond Anti Evil Maid Protecting ha
Page 6 and 7: Can the software asking for your pa
Page 8 and 9: Can the bootloader that loaded the
Page 10 and 11: Can the CPU executing the firmware
Page 12 and 13: Trusted Platform Module (TPM)
Page 14 and 15: SHA1 of next boot component
Page 16 and 17: PCR N = SHA1(PCR O ||hash)
Page 18 and 19: Break SHA1
Page 20 and 21: Perform exactly the same sequence o
Page 22 and 23: An untrustworthy kernel could just
Page 24 and 25: Cryptographic communication between
Page 26 and 27: Need to trust remote machine
Page 28 and 29: How does the remote machine communi
Page 30 and 31: TPMs can control data release based
Page 32 and 33: Data is encrypted with a TPM-specif
Page 34 and 35: TPM decrypts blob. If PCRs don’t
Page 36 and 37: (Someone can still steal your lapto
Page 40 and 41: User has no way of knowing whether
Page 42 and 43: Joanna Rutkowska
Page 44 and 45: Print during boot process or store
Page 46 and 47: Problems:
Page 48 and 49: If booted from USB, relies on user
Page 50 and 51: Exposing the secret is suboptimal
Page 52 and 53: Shared secret with dynamic componen
Page 54 and 55:
Time-based One-Time Passwords
Page 56 and 57:
Well understood by users
Page 58 and 59:
Print a QR code, allow user to enro
Page 60 and 61:
If number on phone matches, safe to
Page 62 and 63:
Secret exists in RAM
Page 64 and 65:
(Still disabled on many free OSes)
Page 66 and 67:
TPM keys can be restricted to PCR s
Page 68 and 69:
Verify that signature matches
Page 70 and 71:
Generate key outside the TPM, impor
Page 72 and 73:
Simplicity is a virtue
Page 74 and 75:
Access to GPIO pins can be restrict
Page 76 and 77:
If LED lights up, system is good
Page 78 and 79:
NFC communication between TPM and d
Page 80 and 81:
What attacks are we always vulnerab
Page 82 and 83:
Attacking the TPM itself
Page 84 and 85:
Incremental improvements in securit
show all

Beyond Anti Evil Maid

Create successful ePaper yourself

Delete template?

Save as template?