Trusted Computing

Trusted Platform Modules

Trusted Platform Modules (TPMs) are secure cryptoprocessors that provide cryptographic primitives and services to otherwise insecure hardware. Services they provide include pseudo-random number generation, remote attestation (hashing), sealing (encryption), and binding (digital signatures). The hardware is tamper-resistant; it destroys its cryptographic keys if it detects tampering.

We have applied TPMs to provide integrity to the voting process by ensuring correctness of booted software. Scantegrity uses TPMs to increase assurance without being dependent on TPMs for security.

CISA members that worked in this area include Russell A. Fink and Richard T. Carback III.