A formal analysis of Trusted Platform Module 2.0 hash‐based message authentication code authorization under digital rights management scenario. Issue 15 (23rd January 2015)

• Record Type: Journal Article
• Authors: Yu, Fajiang; Zhang, Huanguo; Zhao, Bo; Wang, Juan; Zhang, Liqiang; Yan, Fei; Chen, Zhenlin
• Is Part Of: Security and communication networks. Volume 9:Issue 15(2016)
• Page Start: 2802
• Page End: 2815
• Publication Date: 2015-01-23
• Subjects: trusted platform module 2.0 (TPM 2.0) -- trusted computing -- HMAC -- authorization session; Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1193
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract: Trusted Platform Module (TPM) is the "root of trust" of the whole trusted computing platform. The TPM's own security assurance is very important. This paper describes the TPM 2.0 hash‐based message authentication code (HMAC) authorization scheme as a security protocol and makes a detail comparison of the TPM 2.0 authorization to the TPM 1.2 "Object‐Independent Authorization Protocol" and the "Object‐Specific Authorization Protocol." Then the authors use the typed pi calculus to describe the TPM 2.0 HMAC authorization and its security properties under the Digital Rights Management (DRM) scenario and use ProVerify to reason that the key handle manipulation attack for TPM 1.2 does not exist any more in TPM 2.0, because the access entity unique name has been linked to the HMAC value, but the vulnerability of key blob substitution still exists in TPM 2.0. Copyright © 2015 John Wiley & Sons, Ltd. Abstract : The authors use the typed pi calculus to describe the Trusted Platform Module (TPM) 2.0 hash‐based message authentication code authorization and its security properties under the digital rights management scenario, and use ProVerify to reason that the key handle manipulation attack for TPM 1.2 does not exist anymore in TPM 2.0. But the vulnerability of key blob substitution still exists in TPM 2.0.