0%

Book Description

Use Trusted Computing to Make PCs Safer, More Secure, and More Reliable

Every year, computer security threats become more severe. Software alone can no longer adequately defend against them: what’s needed is secure hardware. The Trusted Platform Module (TPM) makes that possible by providing a complete, open industry standard for implementing trusted computing hardware subsystems in PCs. Already available from virtually every leading PC manufacturer, TPM gives software professionals powerful new ways to protect their customers. Now, there’s a start-to-finish guide for every software professional and security specialist who wants to utilize this breakthrough security technology.

Authored by innovators who helped create TPM and implement its leading-edge products, this practical book covers all facets of TPM technology: what it can achieve, how it works, and how to write applications for it. The authors offer deep, real-world insights into both TPM and the Trusted Computing Group (TCG) Software Stack. Then, to demonstrate how TPM can solve many of today’s most challenging security problems, they present four start-to-finish case studies, each with extensive C-based code examples.

Coverage includes

  • What services and capabilities are provided by TPMs

  • TPM device drivers: solutions for code running in BIOS, TSS stacks for new operating systems, and memory-constrained environments

  • Using TPM to enhance the security of a PC’s boot sequence

  • Key management, in depth: key creation, storage, loading, migration, use, symmetric keys, and much more

  • Linking PKCS#11 and TSS stacks to support applications with middleware services

  • What you need to know about TPM and privacy--including how to avoid privacy problems

  • Moving from TSS 1.1 to the new TSS 1.2 standard

  • TPM and TSS command references and a complete function library

  • Table of Contents

    1. Title Page
    2. Copyright Page
    3. IBM Press
    4. Contents
    5. Preface
    6. Acknowledgments
    7. About the Authors
    8. Part I Background Material
      1. Chapter 1 Introduction to Trusted Computing
      2. Chapter 2 Design Goals of the Trusted Platform Module
      3. Chapter 3 An Overview of the Trusted Platform Module Capabilities
    9. Part II Programming Interfaces to TCG
      1. Chapter 4 Writing a TPM Device Driver
      2. Chapter 5 Low-Level Software: Using BIOS and TDDL Directly
      3. Chapter 6 Trusted Boot
      4. Chapter 7 The TCG Software Stack
      5. Chapter 8 Using TPM Keys
      6. Chapter 9 Using Symmetric Keys
      7. Chapter 10 The TSS Core Service (TCS)
      8. Chapter 11 Public Key Cryptography Standard #11
    10. Part III Architectures
      1. Chapter 12 Trusted Computing and Secure Storage
      2. Chapter 13 Trusted Computing and Secure Identification
      3. Chapter 14 Administration of Trusted Devices
      4. Chapter 15 Ancillary Hardware
      5. Chapter 16 Moving from TSS 1.1 to TSS 1.2
    11. Part IV Appendixes
      1. Appendix A TPM Command Reference
      2. Appendix B TSS Command Reference
      3. Appendix C Function Library
      4. Appendix D TSS Functions Grouped by Object and API Level
    12. Index
    13. Footnotes
      1. Chapter 7
      2. Chapter 9
      3. Chapter 12
    18.119.136.235