upvote
I don't think any of the attacks being discussed are actually attacks on the TPM's own threat model.

I think they're attacks on Windows' measured boot approach.

reply
Indeed, which shows that the TPM isn't a fimsly lockbox.
reply
the vast majority of TPMs today live inside the CPU (fTPM). you can't physically attack them
reply
The mere fact of having them inside the CPU could make attacks harder, but doesn't rule them out.
reply