 |
One of the implementation for the remote attestation is TPM(Trusted Platform Module).
IBM proposed an integrity measurement architecture in based on the TPM.
The objective is to have an accurate fingerprint of every piece of software which can affect the runtime environment of the system.
To achieve this, there has to be a core root of trust, which is usually the first few bytes of BIOS. This is known has Core Root of Trust of Measurement (CRTM)
CRTM calculates the hash of the BIOS and extends this hash to PCRs.
A system¡¯s measurement list has a list of hashes (one for every piece of executable), and the PCR has the incremental hash of all these hashes.
|
IEEE/ICACT20220401 Slide.05
[Big Slide]