The TPM as an everyday security tool
summary
Your machine already has TPM 2.0 (required on most PCs since ~2016) and the talk shows concrete uses: reading 23 PCR registers and locking keys to PCR 1 and 7, enrolling a LUKS volume so the TPM auto-unlocks via crypttab, and using the packaged tpm2-pkcs11 bridge to store SSH private keys inside the TPM. Demos include formatting LUKS, enrolling a TPM token, RSA key import, SSH via a PKCS#11 agent, and notes on OpenSSL providers and Keylime integrity attestation—each step shown working end-to-end.
AI-written summary · about
chapters (17)
- 0:00TPM as security tool
- 2:31Cryptographic token
- 3:32TPM specs and versions
- 4:57TPM hardware and keys
- 6:23Access policies and PCRs
- 8:08Demo: PCR values
- 9:29TPM for disk encryption
- 11:13LUKS with TPM decryption
- 14:49Demo: LUKS + TPM
- 17:46Beyond disk encryption
- 18:06TPM with PKCS 11
- 19:53SSH keys in TPM via PKCS 11
- 23:21Demo: SSH auth with TPM
- 24:24TPM with OpenSSL/OpenPGP
- 25:28Advanced TPM tools
- 25:49Why TPM matters
- 26:35Q&A on TPM and SSH
related talks
51mApplications of TPM 2.0
37mtpm2-software.github.io - Enabling the TPM2.0 Ecosystem in Linux
29mThe Trusted Platform Module
42mRecent TPM Security Enhancements to the Linux Kernel
51mSecuring Embedded Linux Systems with TPM 2.0
39mTPM Is No Silver Bullet: Pitfalls in Embedded Device Security
25mOverview and Recent Developments: TPM
23mTPM