Comment

Comment by mschuster91

Still pointless when the key can be sniffed in cleartext by intercepting the communication between the TPM and the CPU [1]. You should always combine it with something only known to the user (i.e. a passphrase).

The only attack TPM-backed disk encryption prevents is someone imaging the disk.

[1] https://blog.scrt.ch/2021/11/15/tpm-sniffing/

parent mschuster91 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton