A Bad Dream: Subverting Trusted Platform Module While You Are Sleeping
summary
Two practical TPM attacks target sleep transitions: a gray area flaw in the TPM 2.0 spec lets an OS skip S3 shutdown notifications and cause PCRs to be reset and normal hash events replayed, affecting many TPM 2.0-equipped machines; a lost pointer implementation bug in tboot lets an attacker hook measured function pointers and inject benign hashes during dynamic launch. Both are demonstrated on commodity hardware; fixes require TPM/BIOS firmware updates and a tboot patch already upstream.
AI-written summary · about
chapters (12)
- 0:00Start
- 1:22Trusted Platform Module (TPM) (2)
- 2:45Root of Trust for Measurement (RTM)
- 3:38Static and Dynamic RTM (SRTM and DRTM)
- 5:56PCR Protection
- 7:04Assumptions and Threat Model
- 10:23The Grey Area Vulnerability (CVE-2018-6622)
- 12:16The Lost Pointer Vulnerability (CVE-2017-16837)
- 14:19Evaluation - The Grey Area Vulnerability
- 15:42Evaluation - The Lost Pointer Vulnerability
- 17:22Countermeasures - The Grey Area Vulnerability
- 18:32Countermeasures - The Lost Pointer Vulnerability
related talks
25mOverview and Recent Developments: TPM
42mRecent TPM Security Enhancements to the Linux Kernel
38mBitLeaker: Subverting BitLocker with One Vulnerability
39mTPM Is No Silver Bullet: Pitfalls in Embedded Device Security
49mBreaking Hardware-Enforced Security With Hypervisors
25mTPM 2.0 Attestable Firmware: Recovering Trust After Firmware Flaws
37mSecure Hibernation in a Locked Down World
23mTPM