Mammon re: autentication and attestation
Authentication checks that YOU are who YOU say YOU are.
Attestation checks the TPM in you machines is a legitimate TPM.
Authentication has been done by software without extra hardware security for a long time. The details of how keys produced in hardware prevent entry to the OS or disable other kinds of attacts are difficult to understand, but encryption produced entirely in hardware does add significant protection to the system.
Attestation is not important except when you are talking to another trusted machine ON THE NETWORK. vERSION 1.2 of the TPM standard will add attestation features and with the unveiling of Wave's attestation servers and services will made those machines using WAVE's key management software MUCH MORE EFFECTIVE and therefore much more marketable.
As has been stated, the earlier of the five million IBM's out there cannot use attestation. From here on out, every TPM is a potential revenue producer for Wave
To compete on the attestation front is always possible, but will not be done overnight. We are developing a real first mover advantage with NTRU-Intel-Etc. And I would guess that we are just about at the point where we will develop our model well before we have to be afraid of a new, left field technology preventing us from getting into double digits. If there is no left field, we are aiming at a very large chunck of the market.