https://peertube.watch/videos/watch/c8357111-fdbf-4562-94e6-cafa3ed5d0bf The Linux Kernel TPM subsystem has been somewhat static for a while. For TPM2 (the standard TPM nowadays) it is used for IMA (PCR extensions), Periodic random number seeding and Trusted Keys (effectively TPM sealed data which may be piped securely to userspace because it can only be unwrapped by the kernel). The big upcoming change is adding encryption and HMAC security to all TPM transactions because of the threats from Interposers (hardware corrupted to snoop the TPM bus). This will be completely transparent to users, but infrastructure can be added to detect interposer compromises. This talk will outline how this works and the null seed scheme for detecting interposers. TPM keys (really TPM sealed data) have been around for a long time and can be used for things like storing the symmetric key for LUKS based dm-crypt. A recent innovation for the kernel was to adopt the standardised form for ASN.1 keys (so other tools can seal and unseal them) and the latest innovation will be to add TPM policy (including signed policies) to kernel keys. This talk will detail what TPM policy is, how it works and how it can be used by the kernel. Speaker: James Bottomley, Track: Kernel devroom, Room: UB5.132, When: Sunday 4 February 2024, 11:20–12:00 (Brussels time), Schedule: FOSDEM 2024 event page, Slides & links TPM2 engine for openssl (with policy), TPM2 Interoperability specification (from above repo) as implemented by the Linux Kernel, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Linux Kernel TPM security and Trusted Key updates” by James Bottomley, FOSDEM 2024. Original recording: 2024/ub5132/fosdem-2024-3141-linux-kernel-tpm-security-and-trusted-key-updates.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Mon, 26 Oct 2026 02:11:45 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/c8357111-fdbf-4562-94e6-cafa3ed5d0bf All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.