google / google/go-tpm

TPM sniffing attacks and session encryption

Open
#259 1 comment 0 reactions 2 assignees Claimed by @chrisfenner View on GitHub
enhancement
Dominant language
Go
Stars
673
Forks
188
PR merge metrics
No merged PRs in 30d

Description

Hey people,

I think we should look into session encryption based on ECDH in order to mitigate TPM 2.0 sniffing attacks.
I think go-tpm has no real mutual auth session encryption yet.

https://twitter.com/XMPPwocky/status/1420527243172868097

Any thoughts about it?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.