For large symmetric operations like disk encryption, the MVK is still in memory.
TPMs are slow and have rather restricted memory.
They are fine for PCRs and some asymmetric operations.
But here they only unseal a key that is then used in software for speed.
It's worse than something protected by a high entropy password. Which is still better than 90% of users would be otherwise
TPMs are slow and have rather restricted memory. They are fine for PCRs and some asymmetric operations.
But here they only unseal a key that is then used in software for speed. It's worse than something protected by a high entropy password. Which is still better than 90% of users would be otherwise