~/talk

TPM in TEE

on YouTube 46m
Talkat Linaro Connect Bangkok 2019 · 2019-04-01..04-05· [security, linux-and-operating-systems]

speaker

name:Joakim Bech
links:none on file

resources

video:https://youtu.be/-uR_oUp0wPE
slides:none on file

summary

Claim: a full TPM 2.0 stack runs inside a TEE as a firmware TPM in TEE and speaks the standard TCG APIs. Implementation: Microsoft’s fTPM reference compiles and runs as an OP-TEE trusted application under QEMU, with an out‑of‑tree kernel shim; it functions but shows noticeable latency and relies on wolfSSL (GPLv2) and software TRNG/seeds. Trade-offs: limited secure storage and PCR handling, small hardware‑like object cache (resource manager swapping), and higher side‑channel/running‑in‑software risk.

AI-written summary · about

chapters (5)

  1. 0:00Introduction to TPM in TEE
  2. 14:48Firmware TPM overview
  3. 22:52Security and performance trade-offs
  4. 35:14Use cases and future steps
  5. 45:08Summary and next steps

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.