《Introduction to cryptography and PKI》4-动态可信度量.pptVIP

* More on stop sign: Used to differentiate outputs from secure code. Also helps with seal (talk about later). * * When S terminates, untrusted OS will regain control, so we need a mechanism to protect S’s state until it is run again. TPM provides Seal and Unseal options… * Be a bit more explicit about what the “Flicker Platform” is. * Run detector over OS image in memory (not FS) * Emphasize properties: Even if server is compromised: Plaintext password protected. Potentially prevent offline dictionary attacks too. * * Unseal on today’s TPMs is an RSA decrypt. This is for our co