Algorithm Agility – Discussion on TPM 2.0 ECC Functionalities

Chen, Liqun; Urian, Rainer

doi:10.1007/978-3-319-49100-4_6

Cited by 3 publications

(4 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…With the TPM 2.0 specification, TPMs started being usable also for a wider range of applications. Chen and Urian [CU16] have summarized the interface provided by the TPM 2.0 specification that can be used for implementing advanced protocols with keys stored securely inside TPMs. These building blocks can be used to construct protocols that perform operations with the secret key securely within the TPM but rely on the host for privacy and other protocol properties.…”

Section: Related Workmentioning

confidence: 99%

“…A number of remote attestation protocols with better privacy properties have been proposed [CL13,PZ11,CU15]. Chen and Urian [CU16] have also shown how four ECC-based asymmetric decryption algorithms can be implemented with TPMs: ECIES, PSEC, ACE, and FACE. Multi-party signature protocols have been implemented on TPMs for BLS signatures [HA20] and even for a restricted variant of Schnorr signatures [Jan23].…”

Section: Related Workmentioning

confidence: 99%

“…The basic building blocks of advanced applications utilizing TPMs rely on six commands, as summarized by Chen and Urian [CU16]; the support for these operations among TPM firmware we analyzed is listed in the last section of Table 2. The majority of these commands are commonly supported by current TPMs; only EC_Ephemeral and ZGen_2Phase are not supported by Infineon TPMs, and Commit by the latest NTC 7.2.3.1.…”

Section: Commandsmentioning

confidence: 99%

“…Asymmetric decryption schemes [CU16] seem computable on all recent TPMs as they require only support for ECDH_KeyGen or ECDH_ZGen. Anonymous attestation and multiparty protocols utilize the two-stage construction based on Commit and Sign together with the ECDAA algorithm and, in some cases, also pairing friendly BN_P256 curve.…”

Section: Commandsmentioning

confidence: 99%

See 3 more Smart Citations

TPMScan: A wide-scale study of security-relevant properties of TPM 2.0 chips

Svenda,

Dufka,

Broz

et al. 2024

TCHES

View full text Add to dashboard Cite

The Trusted Platform Module (TPM) is a widely deployed computer component that provides increased protection of key material during cryptographic operations, secure storage, and support for a secure boot with a remotely attestable state of the target machine. A systematic study of the TPM ecosystem, its cryptographic properties, and the orderliness of vulnerability mitigation is missing despite its pervasive deployment – likely due to the black-box nature of the implementations. We collected metadata, RSA and ECC cryptographic keys, and performance characteristics from 78 different TPM versions manufactured by 6 vendors, including recent Pluton-based iTPMs, to systematically analyze TPM implementations.Surprisingly, a high rate of changes with a detectable impact on generated secrets, the timing of cryptographic operations, and frequent off-chip generation of Endorsement Keys were observed. Our analysis of public artifacts for TPM-related products certified under Common Criteria (CC) and FIPS 140 showed relatively high popularity of TPMs but without explanation for these changes in cryptographic implementations. Despite TPMs being commonly certified to CC EAL4+, serious vulnerabilities like ROCA or TPM-Fail were discovered in the past. We found a range of additional unreported nonce leakages in ECDSA, ECSCHNORR, and ECDAA algorithms in dTPMs and fTPMs of three vendors. The most serious discovered leakage allows extraction of the private key of certain Intel’s fTPM versions using only nine signatures with no need for any side-channel information, making the vulnerability retrospectively exploitable despite a subsequent firmware update. Unreported timing leakages were discovered in the implementations of ECC algorithms on multiple Nuvoton TPMs, and other previously reported leakages were confirmed. The analysis also unveiled incompleteness of vulnerability reporting and subsequent mitigation with missing clear information about the affected versions and inconsistent fixes.

show abstract

Section: Related Workmentioning

confidence: 99%