Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

What is the difference between Intel TXT and TPM?

What is the difference between Intel TXT and TPM? What more Intel TXT has to offer as compared to TPM? Basically, I wanted to know how TXT works? Any easy to follow literature for beginners will be highly appreciated!

like image 798
Geek Avatar asked Oct 21 '13 16:10

Geek


People also ask

Is Intel TXT the same as TPM?

Intel TXT uses a Trusted Platform Module (TPM) and cryptographic techniques to provide measurements of software and platform components so that system software as well as local and remote management applications may use those measurements to make trust decisions.

Is Intel PTT the same as TPM?

To your operating system and applications, PTT looks and acts like TPM. However, the difference between PTT vs TPM is that computers with Intel PTT don't require a dedicated processor or memory.

What is Intel TXT feature?

What is Intel® Trusted Execution Technology (Intel® TXT)? Intel® Trusted Execution Technology is a set of hardware extensions to Intel® processors and chipsets that enhance the digital office platform with security capabilities such as measured launch and protected execution.

Do Intel processors have TPM?

If your computer is based on the 8th Generation or later Intel® Core™ Processor family, you can rest assured knowing your system has Intel® Platform Trust Technology (Intel® PTT), an integrated TPM that adheres to the 2.0 specifications.


1 Answers

Scolytus is right but let me explain a bit more.

As he said, a TPM is a dependency of TXT but not the other way around. The TPM is where TXT will store the measurements - hash of components - of the platform. If TXT is not supported by a platform but a TPM is still present you still have all those features:

  • Integrity measurement – securely measure the platform's components (hashes stored within the TPM)
  • Authenticated boot – a process by which a platform's state (the sum of its components) is reliably measured and stored. SRTM - Static Root of Trust for Measurements
  • Sealed Storage - encrypt data based on the current state of the platform or in other words, what has been measured (the PCR hash values stored in the TPM) - seal operation
  • Attestation - securely report to other parties the state of the platform, e.g., quote operation aka Remote Attestation.

As such you could use trustedgrub (SRTM - Static Root of Trust for Measurements) but not tboot which implements a DRTM (Dynamic Root of Trust for Measurements) aka TXT.

About "how TXT works" see this question.

like image 168
northox Avatar answered Jan 01 '23 08:01

northox