faulTPM: Exposing AMD fTPMs' Deepest Secrets
Updated faulTPM research demonstrates voltage fault injection extracting secrets from AMD firmware TPMs—a hardware root-of-trust risk for the millions of AMD endpoints now requiring TPM 2.0 under Windows 11.
Summary written by editorial AI · Source link below
arXiv:2304.14717v3 Announce Type: replace Abstract: Trusted Platform Modules constitute an integral building block of modern security features. Moreover, as Windows 11 made a TPM 2.0 mandatory, they are subject to an ever-increasing academic challenge. While discrete TPMs - as found in higher-end systems - have been susceptible to attacks on their exposed communication interface, more common firmware TPMs (fTPMs) are immune to this attack vector as they do not communicate with the CPU via an ex
Editorial Analysis
AMD firmware TPMs underpin disk encryption and attestation on a large share of enterprise endpoints; demonstrated secret extraction via fault injection weakens a foundational trust assumption.
Identify AMD-based high-value endpoints relying solely on fTPM and evaluate whether discrete TPMs or additional pre-boot defences are needed.
Research shows AMD firmware TPMs can be physically compromised, potentially undermining disk encryption on millions of enterprise endpoints.
Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.
External link — opens at arXiv Crypto & Security in a new tab.
More from the Vulnerabilities Desk
- SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks3d
- QNAP says hackers breaching NAS devices in Plex2Shell attacks3d
- Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time3d
- [NEU] [mittel] JetBrains CLion: Mehrere Schwachstellen3d
- [UPDATE] [mittel] Keycloak: Mehrere Schwachstellen3d