Had fun in at #OSSSummit in Tokyo yesterday demonstrating a TPM interposer attack obtaining the systemd cryptenroll boot keys

[jejb@mastodon.online]

Had fun in at #OSSSummit in Tokyo yesterday demonstrating a TPM interposer attack obtaining the systemd cryptenroll boot keys

https://sched.co/1jKCe

And also explaining how the new Linux Kernel TPM patches can help defeat this

For those who asked, my python3 interposer designed to steal the keys is here:

kernel/git/jejb/tpm2-interposer.git - Python based TPM2 socket Interposer

(git.kernel.org)

[jejb@mastodon.online]

Thus is the video of my TPM interpose presentation and demo at #OSSummit

https://m.youtube.com/watch?v=WK7NERQXh4I