On Trusted Computing … Part I

Tokens have long been in the industry, and well TPM is almost a similar functionality embedded from the vendor himself, so well hacks are available and well surely will be extended to this new platform.

Infact there are available…

TCG and TPM is most certainly a very controversial subject, with a lot of inaccuracies in the anti side, IMO. I read the GNU FAQ and they were complaining that security companies like you would be put out of business by MS adopting TC! But, don’t most OSS fans also complain about the lack of security in Windows? Surely they should welcome the increased strength of the OS?

Nice reply in #4, but the reply from the anti side is that the iPhone can currently be jailbroken if you want. An MTM (Mobile Trusted Module) should make that task much harder, though. I know that a lot of jailbroken iPhones are being shipped abroad, but how many users using it on the intended network have jailbroken just to install apps, etc?

Looking forward to the rest of this series.

@Hal

how to prevent software from running? basically you’ll be provided with a hardware platform that contains that TPM. Then you install your OS of choice that takes advantage of the TPM to verify its integrity. So, when you boot your machine, the TPM will produce some hash for the boot loader, then when it comes to the OS, it can retrieve that hash and make sure that the boot loader hasn’t been tampered with. Then, the OS will load and run the required processes for all the housekeeping, etc. Every time, it loads something, it can check if there are any other undesirable software running, etc. This way we can obviously stop rootkits from loading themselves before any other security software can run. If you think about the current Vista’s Protected Media Path, the kernel keeps checking for any unknown loaded kernel-mode software, if something is found, it will stop some sort of DRM protected media from playing. Thus, they can prevent copying it.

Having said that, people can still modify the kernel to break that PMP. But with a TPM on board, it’s way much harder!

Forget about DRM sort of content. Will mass produced OS’s try to block third-party applications? Very unlikely. There is no single company out there that can provide a complete OS with every sort of application that a human might need. That’s why they try to produce SDKs and make their platforms expendable, so people can write their own software and utilise the platforms in different ways. However, OS vendors might take another approach and start selling platforms with completely locked environments, and other ones with different levels of semi-locked behaviour.

Do I think an OS today could be written that would prevent certain software from running? Yes and no. They can certainly make it harder by preventing people from directly patching the kernel and enforcing greater measures to enforce the kernel integrity. Thus, the kernel will be sitting in the back watching and enforcing policies. It is not a bullet-proof solution as the route to disable the kernel integrity-checking-routine is still accessible, but until TPMs get more popular, this is what they have in hands.

How well do I think such a version of windows would have sold? It depends on what sort of device you’re looking to get. Mobile TPM specifications were published a while ago and it’s very likely that mobile platforms will get TPMs popular first. So, if you’re buying this new gadget that can play some cool songs and videos. However, you can run nothing else written by the average Bob or copy any of those media files. Would you mind? You might do, but I can count you a lot of other people who would hurry to buy this device. (In theory,at least, the price of those devices should come down if such measures would be enforced). Now, scale this idea to PCs. I think I can also count you a lot of other people that I know who wouldn’t mind getting those platforms if somebody would offer them some discount.

Those are never easy questions, and Trusted Computing is certainly a controversial area.

HTH.

Could you clarify more specifically what you mean about how mass produced operating systems might prevent some legitimate software from running? What would be a specific example of this, and how exactly would the OS + TPM prevent this software from running? (And what role would the TPM play exactly?)

Along these lines, do you think an OS today could be written that would prevent certain software from running (without using the TPM)? For example, could Microsoft Windows have been written to prevent non-Microsoft software from running? How well do you think such a version of Windows would have sold?

@badidea

Well, currently all TPMs require physical presence (as described by the TCG specifications) to be enabled. Usually this happens as an option within the BIOS. So we’re sort of protected from people who would like to have it enabled!

Regarding the second point, I tend to have similar worries to yours, but it’s still early to judge. Certainly, vendors will have more powers to enforce DRM sort of applications. But it’s unclear whether they’ll be (legally) able to squeeze small developers out of the picture and restrict the type of applications on their platforms. Remember that ideas like (Protected Media Path) is already implemented in MSFT’s Vista by relying on kernel support. So the next step will be to take that to the hardware level.

So today all a malicious hacker would need to do would be enable and/or configure the TPM and all new PCs will cease to function correctly. Nice.

At what point did giving Microsoft and/or Intel control over what we can and can’t run on our hardware become a good idea? TPMs will not allow US to verify the “integrity” of our PCs. The TPM will ensure that we can only do what “they” allow us.