Replies to post #136 on Untrustworthy Trusted Computing Firms (fka NOTRUST

[Magdelina]

This space is fascinating, and it will be interesting to watch how it evolves.

I'm glad you enjoyed the article.

What is your take on this statement?

“The identity-capable platform is a strong complement to identity infrastructure, not competition for it,” she says. “It is not about providing applications and services, but it is about making sure applications and services (including operating system level applications and services) can depend on consistent, standards-based support of identity functions.”

[24601]

That doesn't sound right to me.

Is a main processor is not a good place to secure cryptographic keys? Cryptographic keys must be secured. Although they can be secured in silicon, that requires non-volatile memory. A main processor with non-volatile storage can require a very expensive manufacturing process. Moreover, because every trusted platform module must have a unique key, for it reside on a main processor would require a secure manufacturing line.

And what about export-control issues?

It's hard to see the hardware component of trust inside the main processor.