Attacking TPM Part 2: A Look at the ST19WP18 TPM Device

Presented at DEF CON 20 (2012), July 27, 2012, 3 p.m. (50 minutes)

The STMicroelectronics ST19WL18P TPM die-level analysis. Companies like Atmel, Infineon and ST are pushing motherboard manufacturers to use these devices. End-users trust these devices to hold passwords and other secrets. Once more, I will show you just how insecure these devices are.

Presenters:

• Chris Tarnovsky - Flylogic, Inc.
  Christopher 'Biggun' Tarnovsky owns Flylogic, Inc. and specializes in analysis of semiconductors from a security "how strong is it really" standpoint. Flylogic offers detailed reports on substrate attacks which define if a problem exists. If a problem is identified, we explain in a detailed report all aspects of how the attack was done, level of complexity and so on. This is something we believe is unique and allows the customer to then go back to the chip vendor armed with the knowledge to make them make it better (or possibly use a different part).

Links:

• https://defcon.org/html/defcon-20/dc-20-speakers.html#Tarnovsky
• https://infocon.org/cons/DEF CON/DEF CON 20/DEF CON 20 video and slides/DEF CON 20 - Chris Tarnovsky - Attacking TPM Part 2 A Look at the ST19WP18 TPM Device - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=Bp26rPw90Dc

Similar Presentations:

• Disobey 2020 / Trustworthy platforms in practice: I have a TPM, now what?
• Black Hat USA 2020 Virtual / Remote Timing Attacks on TPMs, AKA TPM-Fail
• Black Hat Asia 2019 / Finally, I Can Sleep Tonight: Catching Sleep Mode Vulnerabilities of the TPM with the Napper