Difference between revisions of "Hardware Protection"
From MgmtWiki
(→Context) |
|||
| Line 2: | Line 2: | ||
[[Hardware Protection]] offered by Hardware Security Modules (HSM see [[FIPS 140]]) or management chips. | [[Hardware Protection]] offered by Hardware Security Modules (HSM see [[FIPS 140]]) or management chips. | ||
==Context== | ==Context== | ||
| − | Latest version as of 2019-05-22 is [https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf FIPS 140-3], version 3. | + | *Latest version as of 2019-05-22 is [https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-3.pdf FIPS 140-3], version 3. |
| + | * The TPM (Trusted Platform Module) version 1 was a purely hardware version of protection that was offered only as a stand alone chip. With version 2 defined as software, it can be (and is) included in any [[Trusted Execution Environment]]. | ||
| + | ==Problems== | ||
| + | When hardware contains software, and particularly when it contains firmware, it no longer has the same level of protection that a purely hardware solution offers. For example the Apple T2 chip has been hacked and cannot be fixed in the field.<rev>Lily Hey Newman, ''Apple's T2 Security Chip Has an Unfixable Flaw'' (2020-10-05) https://www.wired.com/story/apple-t2-chip-unfixable-flaw-jailbreak-mac/?bxid=5c5b250d24c17c67f8640083&cndid=45183233&esrc=AUTO_PRINT&mbid=CRMWIR092120&source=EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired&utm_campaign=aud-dev&utm_content=A&utm_mailing=WIR_Daily_100720&utm_medium=email&utm_source=nl&utm_term=list1_p4</ref> | ||
| + | |||
==References== | ==References== | ||
* See wiki page [[Smart Phone]] for a discussion of hardware versus software protection within a modern ARM based [[Trusted Execution Environment]]. | * See wiki page [[Smart Phone]] for a discussion of hardware versus software protection within a modern ARM based [[Trusted Execution Environment]]. | ||
Revision as of 09:53, 8 October 2020
Contents
Full Title
Hardware Protection offered by Hardware Security Modules (HSM see FIPS 140) or management chips.
Context
- Latest version as of 2019-05-22 is FIPS 140-3, version 3.
- The TPM (Trusted Platform Module) version 1 was a purely hardware version of protection that was offered only as a stand alone chip. With version 2 defined as software, it can be (and is) included in any Trusted Execution Environment.
Problems
When hardware contains software, and particularly when it contains firmware, it no longer has the same level of protection that a purely hardware solution offers. For example the Apple T2 chip has been hacked and cannot be fixed in the field.<rev>Lily Hey Newman, Apple's T2 Security Chip Has an Unfixable Flaw (2020-10-05) https://www.wired.com/story/apple-t2-chip-unfixable-flaw-jailbreak-mac/?bxid=5c5b250d24c17c67f8640083&cndid=45183233&esrc=AUTO_PRINT&mbid=CRMWIR092120&source=EDT_WIR_NEWSLETTER_0_DAILY_ZZ&utm_brand=wired&utm_campaign=aud-dev&utm_content=A&utm_mailing=WIR_Daily_100720&utm_medium=email&utm_source=nl&utm_term=list1_p4</ref>
References
- See wiki page Smart Phone for a discussion of hardware versus software protection within a modern ARM based Trusted Execution Environment.
