AMD firmware-based TPM Compromised

[simmerskool]

Content source

https://www.tomshardware.com/news/amd-tpm-hacked-faultpm

Update, 3:15pm PT: AMD shared a comment on the new vulnerability disclosure, which we've added below.

Original Article, 9:16am PT : A new paper released by security researchers at the Technical University of Berlin reveals that AMD's firmware-based Trusted Platform Module (fTPM / TPM) can be fully compromised via a voltage fault injection attack, thus allowing full access to the cryptographic data held inside the fTPM in an attack called 'faulTPM.' Ultimately this allows an attacker to fully compromise any application or encryption, like BitLocker, that relies solely upon TPM-based security.

 

[harlan4096]

Too laborious to implement, also needs physical access to the laptop... so, no way...

 

[TairikuOkami]

Well it is software TPM, it was intended to be used as a backup, but everyone uses it as a main TPM, though it is causing many problems, this is just another one and it is not the last one.

 

[HarborFront]

So, INTEL is safe

Quote from article

According to the researchers, Intel's Converged Security and Manageability Engine (CSME) prevents these types of attacks.

Unquote