undefined | Better HN

0 pointspatmorgan231y ago0 comments

TPM isn't just for secure boot. Windows utilizes it for Bitlocker full disk encryption.

It's just not widely used for other applications.

0 comments

That's still essentially part of the boot process. You can't use dTPMs as HSMs for TLS or whatever because dTPMs are way too slow.

sim7c001y ago

Thanks, that's interesting. as commenter noted i'd say this is part of the boot-process, but you are right, it's not technically secure boot related. booting securely != secure boot that's correct :)

j / k navigate · click thread line to collapse

0 pointspatmorgan231y ago0 comments

TPM isn't just for secure boot. Windows utilizes it for Bitlocker full disk encryption.

It's just not widely used for other applications.

0 comments

cryptonector1y ago

That's still essentially part of the boot process. You can't use dTPMs as HSMs for TLS or whatever because dTPMs are way too slow.

sim7c001y ago

Thanks, that's interesting. as commenter noted i'd say this is part of the boot-process, but you are right, it's not technically secure boot related. booting securely != secure boot that's correct :)

j / k navigate · click thread line to collapse