Beyond Anti Evil Maid

Recommendations

Info

Can the bootloader that loaded the kernel running the software asking for your password be trusted?
Can the firmware that launched the bootloader that loaded the kernel running the software asking for your password be trusted?
Page 1: Beyond Anti Evil Maid Protecting ha
Page 4 and 5: When do you trust your computer?
Page 6 and 7: Can the software asking for your pa
Page 10 and 11: Can the CPU executing the firmware
Page 12 and 13: Trusted Platform Module (TPM)
Page 14 and 15: SHA1 of next boot component
Page 16 and 17: PCR N = SHA1(PCR O ||hash)
Page 18 and 19: Break SHA1
Page 20 and 21: Perform exactly the same sequence o
Page 22 and 23: An untrustworthy kernel could just
Page 24 and 25: Cryptographic communication between
Page 26 and 27: Need to trust remote machine
Page 28 and 29: How does the remote machine communi
Page 30 and 31: TPMs can control data release based
Page 32 and 33: Data is encrypted with a TPM-specif
Page 34 and 35: TPM decrypts blob. If PCRs don’t
Page 36 and 37: (Someone can still steal your lapto
Page 40 and 41: User has no way of knowing whether
Page 42 and 43: Joanna Rutkowska
Page 44 and 45: Print during boot process or store
Page 46 and 47: Problems:
Page 48 and 49: If booted from USB, relies on user
Page 50 and 51: Exposing the secret is suboptimal
Page 52 and 53: Shared secret with dynamic componen
Page 54 and 55: Time-based One-Time Passwords
Page 56 and 57: Well understood by users
Page 58 and 59:
Print a QR code, allow user to enro
Page 60 and 61:
If number on phone matches, safe to
Page 62 and 63:
Secret exists in RAM
Page 64 and 65:
(Still disabled on many free OSes)
Page 66 and 67:
TPM keys can be restricted to PCR s
Page 68 and 69:
Verify that signature matches
Page 70 and 71:
Generate key outside the TPM, impor
Page 72 and 73:
Simplicity is a virtue
Page 74 and 75:
Access to GPIO pins can be restrict
Page 76 and 77:
If LED lights up, system is good
Page 78 and 79:
NFC communication between TPM and d
Page 80 and 81:
What attacks are we always vulnerab
Page 82 and 83:
Attacking the TPM itself
Page 84 and 85:
Incremental improvements in securit
show all

Beyond Anti Evil Maid

Create successful ePaper yourself

Delete template?

Save as template?