Paper Info
Title
TCG inside?: a note on TPM specification compliance
Abstract
The Trusted Computing Group (TCG) has addressed a new generation of computing platforms employing both supplemental hardware and software with the primary goal to improve the security and the trustworthiness of future IT systems. The core component of the TCG proposal is the Trusted Platform Module (TPM) providing certain cryptographic functions. Many vendors currently equip their platforms with a TPM claiming to be TCG compliant. However, there is no feasible way for application developers and users of TPM-enabled systems to verify this compliance. In practice, manufacturers may exploit the flexibility that the specification itself provides, or they may deviate from it by inappropriate design that might lead to security vulnerabilities. Hence, it is crucial to have an independent means for testing the compliance as well as analyzing the security of different TPMs. In this paper, we aim at making the first steps towards fulfilling this requirement: We have developed a test strategy as well as a prototype test suite for TPM compliance testing. Although our test does not cover the complete TCG specification, our test results show that many TPM implementations do not meet the TCG specification and have bugs. Moreover, we discuss that non-compliance may have crucial impact on security, and point out the corresponding security problems in case of a widespread TPM.
Year
DOI
Venue
2006
10.1145/1179474.1179487
STC
Keywords
Field
DocType
tcg compliant,tpm implementation,tpm compliance testing,widespread tpm,complete tcg specification,tcg proposal,prototype test suite,tcg specification,tpm specification compliance,corresponding security problem,security vulnerability,tcg inside,trusted platform module,test,trusted computing
Test suite,Trusted Computing,Cryptography,Computer science,Computer security,Exploit,Conformance testing,Trusted Platform Module,Implementation,Test strategy
Conference
ISBN
Citations 
PageRank 
1-59593-548-7
36
3.11
References 
Authors
6
5
Name
Order
Citations
PageRank
Ahmad-reza Sadeghi15463334.69
Marcel Selhorst2705.35
Christian Stüble331829.52
Christian Wachsmann457025.19
Marcel Winandy583148.15