zlacker

[parent] [thread] 7 comments
1. mike_h+(OP)[view] [source] 2023-07-27 09:45:16
> Most Chromebooks themselves don't have a TPM

Citation needed. I'm pretty sure all Chromebooks have a TPM and it's a firm requirement for making one. ChromeOS uses the TPM extensively and fully supports remote attestation:

https://www.chromium.org/developers/design-documents/tpm-usa...

TPMs have been a requirement on PCs since at least 2016 I think, and in reality most came with them before that too (but there's a v1 vs v2 difference).

> a 1.X version of the TPM. In theory it performs just as well as TPM 2.X but they will not be supported because, again, I will not be able to use my own keys.

This is all wrong. TPM 1.2 uses SHA1 for everything which is a broken hash function so there is a major difference in robustness between them. That's why TPM 1.2 is being phased out. It has nothing to do with "using your own keys" which is out of the domain of what TPMs do anyway, TPMs are always owned by the device user. You're thinking of firmware boot signing and other things that are separate to the TPM chip but even there, you can use your own signing keys.

replies(1): >>Knee_P+k2
2. Knee_P+k2[view] [source] 2023-07-27 10:04:12
>>mike_h+(OP)
Thank you for the knowledgeable reply.

This choice will still render a ton of devices basically e-waste for no real good reason

replies(2): >>BSEdlM+ca >>sofixa+jc
◧◩
3. BSEdlM+ca[view] [source] [discussion] 2023-07-27 11:04:49
>>Knee_P+k2
you're calling the bottom line of hardware manufacturers "no good reason"!
replies(1): >>yjftsj+HM1
◧◩
4. sofixa+jc[view] [source] [discussion] 2023-07-27 11:26:30
>>Knee_P+k2
> TPM 1.2 uses SHA1 for everything which is a broken hash function

> No reason

Using broken encryption is quite a decent reason.

replies(2): >>Ashame+Ce >>raxxor+IA3
◧◩◪
5. Ashame+Ce[view] [source] [discussion] 2023-07-27 11:47:12
>>sofixa+jc
Definitely not for the actual user of the device.
◧◩◪
6. yjftsj+HM1[view] [source] [discussion] 2023-07-27 18:23:27
>>BSEdlM+ca
Well... yes? Hardware can be very much bottom of the barrel and still be perfectly serviceable.
replies(1): >>Peache+MB3
◧◩◪
7. raxxor+IA3[view] [source] [discussion] 2023-07-28 10:28:42
>>sofixa+jc
SHA1 is not for encryption, it is a signature algorithm.

It is considered broken because there is a faster way than simple brute force to create a collision. The currently know approach is still computationally expensive.

It is correct to call it broken, but I don't see the implications for TMP at all. TPM is shitty tech in the first place in my opinion, but aside from that there is little practical relevance.

◧◩◪◨
8. Peache+MB3[view] [source] [discussion] 2023-07-28 10:39:38
>>yjftsj+HM1
It was sarcasm
[go to top]