Hardware Security
What is the main role of a TPM (Trusted Platform Module) installed in PCs and similar?
- AA dedicated circuit to speed up display
- BA component managing CPU cooling
- CSecurely generating and storing keys, recording measurements of booted software and attesting to that state, among other security functions
Show answer and explanation
Answer: C. Securely generating and storing keys, recording measurements of booted software and attesting to that state, among other security functions
A TPM is a tamper-resistant security chip (or a function built into the CPU) that generates and stores keys, performs cryptographic operations, generates random numbers and records hashes of booted software. For example, releasing the disk encryption key only when the boot state is correct makes data hard to read even if the disk is removed or boot software is altered.
- A. It is not a display circuit.
- B. It is not a cooling component.
- C. Correct. It also protects keys such as disk encryption keys.