Shah J.

afd5856c26183402eae1979cb49fc8965c50257b3ac452d0ae6a7da0d21bb49a

TL;DR: Power failures during TPM operations can leave edge devices in an inconsistent state – secure but unusable.

While I researching the recently added Linux kernel TPM HMAC protection (read about it here), I looked around and found a 20-year‑old, straight out of 90’s [4], classic buffer overflow in one of the Infineon TPM drivers [1] [2]: static int tpm_inf_recv(st…

The title is my attempt at humor and a excuse to discuss a security model introduced way back in the 1970s [1][2].

The discrete TPMs (dTPM) have had a rough ride over the past few decades.

EVE OS uses TPM as one of its core security components.

TL;DR: Some devices with certain fTPMs failed updates because their TPM didn’t like ECC keys without proper padding, throwing “point is not on the required curve.” when calculating ECDH shared key using ECDHZGen because off-spec fTPMs and X.Bytes() in Gol…

I’ve put together some slides on how we used to do security requirement engineering at Mbition.

I was browsing the MS-DOS source code and I was thinking is it possible to have a preemptive scheduler in a 16-bit OS running purely in real-mode?

A few years ago, I was tasked to write a grammar fuzzer, I started looking at EBNF and BNF formats and one of the first (obvious?)