PCR 9: How a simple misconfiguration can break TPM full disk encryption

No ratings

Presented at BSidesLV 2024 by

Max Arnold

Trusted Platform Modules (TPMs) are commonly used to enable passwordless disk encryption. This process uses the TPM to measure and verify the integrity of the boot process and ensure that nothing has been compromised. This talk will show how to identify Linux systems that don't fully validate their boot sequences, how to easily attack a common misconfiguration to decrypt the drive, and how to properly verify the full boot sequence.