lkml.org 
[lkml]   [2019]   [Oct]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] KEYS: asym_tpm: Switch to get_random_bytes()
From
Date
The TPM library specification states that the TPM must comply with NIST 
SP800-90 A.

https://trustedcomputinggroup.org/membership/certification/tpm-certified-products/

shows that the TPMs get third party certification, Common Criteria EAL 4+.

While it's theoretically possible that an attacker could compromise
both the TPM vendors and the evaluation agencies, we do have EAL 4+
assurance against both 1 and 2.

On 10/6/2019 8:05 PM, Jarkko Sakkinen wrote:
>
> Kernel has the random number generator for two reasons:
>
> 1. To protect against bugs in hwrng's.
> 2. To protect against deliberate backdoors in hwrng's.
>
> How TPM RNG is guaranteed to protect against both 1 and 2?

\
 
 \ /
  Last update: 2019-10-08 00:14    [W:0.198 / U:0.252 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site