- From: Anders Rundgren <anders.rundgren.net@gmail.com>
- Date: Tue, 15 Jul 2014 05:56:41 +0200
- To: sysapps <public-sysapps@w3.org>
On 2014-07-12 12:45, Anders Rundgren wrote: > Somewhat unfortunate for Microsoft and Intel who have "bet the house" on TPMs (Trusted Platform Modules), all their competitors in the mobile space including Google and Apple, have rather settled on TEE (Trusted Execution Environment) schemes enabling systems like this: > > http://www.nasdaq.com/article/samsung-mobilesecurity-platform-to-be-part-of-next-android-20140625-00937 > > iOS: > http://images.apple.com/iphone/business/docs/iOS_Security_Feb14.pdf > > How come the competition didn't buy into the TPM? > > TPMs are based on a "one-size-fits-all" security API philosophy. Since Intel relies on external vendors supplying TPM-components this (IMHO fairly unwieldy) API must also be standardized which makes the process updating TPMs extremely slow and costly. > > TEEs OTOH can be fitted at any time with application-specific security APIs which both can be standardized or entirely proprietary. In fact, even third-parties can crate new security APIs using GlobalPlatform's TEE! > > How about security? Since there is (generally) very little consensus on these matters, I should probably not dive too deep into this :-) > > Anders > If someone wonders about the relevance of this message in SysApps, you can replace "TPM" with "SE", at least if we are talking mobile devices. TEE-based systems would use high-level commands like featured in FIDO/Google U2F: https://fidoalliance.org/specs/fido-u2f-raw-message-formats-v1.0-rd-20140209.pdf
Received on Tuesday, 15 July 2014 03:57:15 UTC