TPMs and the Linux Kernel - A Better Path to Hardware Security

Explore a comprehensive conference talk from HITB2024BKK that delves into improving TPM (Trusted Platform Module) integration within the Linux Kernel ecosystem. Learn why TPM adoption remains low despite its widespread presence in modern laptops and servers, and understand the challenges faced with competing software stacks, lack of standardization, and complex operating system configurations. Discover proposed solutions for better TPM integration with Linux Kernel subsystems, particularly focusing on kernel keystore and cryptographic API implementations. Gain insights into how the Linux Kernel can simplify hardware-based security for third-party applications by managing TPM communication complexities and providing higher-level security primitives. Delivered by Ignat, a Cloudflare systems engineer with extensive experience in Linux, platform and hardware security, previously contributing to Samsung Electronics' Mobile Communications Division and Ukrainian government communications services.