Flexible μTPMs through disembedding

ABSTRACT

With the utilization of TPM-based trusted platforms in real applications, and the subsequent adaption of the specification to the experience gained from such utilization, it increasingly appears that the TPM architecture has some fundamental flaws that result in more and more complex and expensive hardware requirements. In this paper, we propose a new architecture that resets the trust boundary to a much smaller scale, thus allowing for much simpler and more flexible TPM implementations, without sacrificing the security gains from a classical TPM.

REFERENCES

• 1: M. Bellare, P. Rogaway, and D. Wagner. The EAX Mode of Operation. In B. K. Roy and W. Meier, editors, Fast Software Encryption, 11th International Workshop, FSE 2004, Delhi, India, February 5--7, 2004, Revised Papers, volume 3017 of Lecture Notes in Computer Science, pages 389--407. Springer-Verlag, 2004.
• 2: Stefan Berger , Ramón Cáceres , Kenneth A. Goldman , Ronald Perez , Reiner Sailer , Leendert van Doorn, vTPM: virtualizing the trusted platform module, Proceedings of the 15th conference on USENIX Security Symposium, July 31-August 04, 2006, Vancouver, B.C., Canada
• 3: BSI. Federal Government's Comments on the TCG and NGSCB in the Field of Trusted Computing. http://www.bsi.bund.de/sichere_plattformen/ trustcomp/stellung/StellungnahmeTCG1_2a_e.pdf.
• 4: B. Chevallier-Mames, D. Naccache, P. Paillier, and D. Pointcheval. How to Disembed a Program? In M. Joye and J.-J. Quisquater, editors, Cryptographic Hardware and Embedded Systems - CHES 2004: 6th International Workshop Cambridge, MA, USA, August 11--13, 2004. Proceedings, volume 3156 of Lecture Notes in Computer Science, pages 441--454. Springer-Verlag, 2004.
• 5: B. Chevallier-Mames, D. Naccache, P. Paillier, and D. Pointcheval. How to Disembed a Program? Cryptology ePrint Archive, Report 2004/138, 2004. http://eprint.iacr.org/.
• 6: Victor Costan , Luis F. Sarmenta , Marten Dijk , Srinivas Devadas, The Trusted Execution Module: Commodity General-Purpose Trusted Computing, Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications, p.133-148, September 08-11, 2008, London, UK [doi>10.1007/978-3-540-85893-5_10]
• 7: Kurt Dietrich, An integrated architecture for trusted computing for java enabled embedded devices, Proceedings of the 2007 ACM workshop on Scalable trusted computing, November 02-02, 2007, Alexandria, Virginia, USA [doi>10.1145/1314354.1314358]
• 8: Thomas Eisenbarth , Tim Güneysu , Christof Paar , Ahmad-Reza Sadeghi , Dries Schellekens , Marko Wolf, Reconfigurable trusted computing in hardware, Proceedings of the 2007 ACM workshop on Scalable trusted computing, November 02-02, 2007, Alexandria, Virginia, USA [doi>10.1145/1314354.1314360]
• 9: J.-E. Ekberg and M. Kylänpää. Mobile Trusted Module (MTM) --- an introduction, Nov. 2007. http://research.nokia.com/files/NRCTR2007015.pdf.
• 10: D. A. McGrew and J. Viega. The Security and Performance of the Galois/Counter Mode (GCM) of Operation. In A. Canteaut and K. Viswanathan, editors, Progress in Cryptology - INDOCRYPT 2004, 5th International Conference on Cryptology in India, Chennai, India, December 20--22, 2004, Proceedings, volume 3348 of Lecture Notes in Computer Science, pages 343--355. Springer-Verlag, 2004.
• 11: Phillip Rogaway , Mihir Bellare , John Black, OCB: A block-cipher mode of operation for efficient authenticated encryption, ACM Transactions on Information and System Security (TISSEC), v.6 n.3, p.365-403, August 2003 [doi>10.1145/937527.937529]
• 12: Ahmad-Reza Sadeghi , Marcel Selhorst , Christian Stüble , Christian Wachsmann , Marcel Winandy, TCG inside?: a note on TPM specification compliance, Proceedings of the first ACM workshop on Scalable trusted computing, November 03-03, 2006, Alexandria, Virginia, USA [doi>10.1145/1179474.1179487]
• 13: Luis F. G. Sarmenta , Marten van Dijk , Charles W. O'Donnell , Jonathan Rhodes , Srinivas Devadas, Virtual monotonic counters and count-limited objects using a TPM without a trusted OS, Proceedings of the first ACM workshop on Scalable trusted computing, November 03-03, 2006, Alexandria, Virginia, USA [doi>10.1145/1179474.1179485]
• 14: Mario Strasser , Heiko Stamer, A Software-Based Trusted Platform Module Emulator, Proceedings of the 1st international conference on Trusted Computing and Trust in Information Technologies: Trusted Computing - Challenges and Applications, March 11-12, 2008, Villach, Austria [doi>10.1007/978-3-540-68979-9_3]
• 15: Trusted Computing Group. TCG Storage Architecture Core Specification. available at https://www.trustedcomputinggroup.org/specs/Storage/.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.3 SPECIAL-PURPOSE AND APPLICATION-BASED SYSTEMS
      Subjects: Real-time and embedded systems

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Design, Measurement, Security

Keywords:
mobile trusted module, secure coprocessor, trusted computing, trusted platform module