LPC bus tap. I feel like I'm modding PS2s again...pic.twitter.com/cXqzRa6SAN
Show this thread
-
If Microsoft was smart about it, then the command payloads should be encrypted w/ HMAC over the bus. But if they made the same mistake as every other implementation I looked at, then you should see secrets in plaintext in your LPC bus MITM.
-
-
Well, TPM v1.2 also uses auth sessions. But as I show in my paper, it can be defeated :) The negotiation of the shared secret (the "AuthData" for establishing a session) is unauthenticated and so a MITM can spoof it and thereafter can decode all traffic.
-
Does your system sniff traffic, or actively MITM it too?
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.