Trusted Platform Module: Difference between revisions

Revision as of 01:17, 9 July 2006

Revision as of 09:04, 10 July 2006

Line 12:

*[[Winbond]]

==HowWhat it worksdoes==

Several manufacturers are producing microchips that will be built onto a PC or laptop's motherboard during manufacturing. A Trusted Platform Module offers facilities for secure generation of cryptographic keys, the abilities to limit the use of keys (to either signing / verification or encryption / decryption), as well as a hardware [[Random Number Generator]]. Its two most controversial features are [[remote attestation]], binding and sealing. Remote attestation allowscreates an unforgeable summary of the software on a computer, allowing a remotethird party (such as a digital music store) to obtainverify anthat unforgeable statement detailing whatthe software currently runs on the has machinenot inbeen questioncompromised. Sealing and binding allow to encrypt data in such a way that it may be decrypted only in the exact same state. The first feature is seen as a potential threat to privacy by many, while the second is often seen as a herald to DRM systems of unprecedented restrictiveness. [[Direct anonymous attestation]] improves privacy, but is still considered insufficient by some.

==Uses==