Re: [PATCH 1/4] integrity: TPM internel kernel interface

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Kenneth Goldman
Date: Monday, August 18, 2008 - 8:01 am

Pavel Machek <pavel@suse.cz> wrote on 08/14/2008 07:12:10 AM:


1 - The pluggable modules use a standard LPC bus header.  In my>
experience, all the TPM vendors supply them in low quantities for
evaluation and test, but no one expects them to be used in
production because of the security issues.

2 - I'd be interested to know whether the slowdown was in
the BIOS, in the OS boot, or on bringup of an application?
Was this Linux or some other OS?

Both the TCG and the platform vendors are very sensitive to
the BIOS part of the boot time.  For example, the TPM self test
is broken into a fast part for features that are required
before boot and a slower part that can be done later. There
are recommendations to break up hashing to remove the TPM
from the critical path.

Even then, the slowest TPM operation is keypair creation,
on the order of 1-5 seconds, which should not be required
during boot.  I wonder if the problem was actually a code
bug or unsupported operation causing timeouts?

It would be great if you could debug a bit and report your
findings to us.

--
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
[PATCH 1/4] integrity: TPM internel kernel interface, Mimi Zohar, (Fri Aug 8, 11:55 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Christoph Hellwig, (Sat Aug 9, 11:46 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Christoph Hellwig, (Tue Aug 12, 12:30 pm)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Tue Aug 12, 1:57 pm)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Wed Aug 13, 6:46 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Wed Aug 13, 6:58 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Christoph Hellwig, (Wed Aug 13, 7:45 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Wed Aug 13, 9:39 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Peter Dolding, (Fri Aug 15, 3:37 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Fri Aug 15, 11:50 am)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Valdis.Kletnieks, (Fri Aug 15, 12:22 pm)
Re: [PATCH 1/4] integrity: TPM internel kernel interface, Kenneth Goldman, (Mon Aug 18, 8:01 am)