Blog moves SSH keys onto YubiKey, TPM and Apple Secure Enclave
Leftover disk files are handles only; private material stays in the token, TPM or enclave.
Stories per day · 30 days
2 RSS
Relatedlinux3secure-boot2amutable1attestation1easy-anti-cheat1ebpf1epic-games1hardware-keys1hibernation1kernel1lockdown1measured-boot1remote-attestation1secure-enclave1ssh1yubikey1
11 stories, newest first · one card per story
Stories tagged #tpm
Amutable opens private preview of Foundations Linux without SSH
Machines must send signed, hardware-backed reports of their images before receiving secrets or rejoining a cluster.
Epic's EAC2 v2 seems fairly easily bypassable
Matthew Garrett says Epic's Linux Easy Anti-Cheat 2 attestation can be spoofed with a reset or spare TPM.
4
Linux Lockdown and Hibernation (again)
Linux Lockdown blocks hibernation because root can forge swap images that resume into attacker-controlled kernel memory.
Mission-Aware Attestation Envelopes for Time-Critical Autonomous Action: A Hardware-in-the-Loop V2I Study
Researchers define mission-aware attestation that rejects stale or late integrity evidence on a hardware-in-the-loop V2I platform.
Understanding NvPCRs in systemd v262
A deep dive explains systemd v262 NvPCRs, extra TPM registers for measurement and attestation.
Signing TLS handshakes inside a TPM
Blog post demonstrates signing TLS handshakes in Go with a TPM-held private key; full text was unavailable behind an Anubis challenge.
TPMSpy: Validation of Measured Boot Systems by Low-Level Tracing of TPM Usage
Researchers present TPMSpy, a platform-agnostic method validating TPM Measured Boot via low-level tracing, finding inconsistent Linux systemd measurements that break remote attestation and LUKS decryption.
New TCG guidance gives buyers a way to test PQC-ready TPM claims
Trusted Computing Group published PTP 1.07-based requirements defining PQC-ready and PQC-upgradable TPM designations to guide buyers assessing quantum-safe hardware.
2
New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims
TCG issued guidance to help businesses verify that trusted platform modules genuinely meet quantum-safe requirements.
Google Password Manager Attacks Could Let Malware Hijack Passkey
Unit 42 details three attack paths letting Windows malware silently sign into passkey-protected accounts via Chrome's Google Password Manager without user verification.
1