On Tue, Jul 30, 2013 at 8:12 AM, Mike Hearn <mike@plan99.net> wrote:
> The TPM is a piece of secure* hardware

I've seen some motherboards with a TPM module header but none
came with it installed. I think the modules themselves might be
$50-$100 range. They might come with some API docs.
Some of you might have links to ones you've used...

> As part of that role, the TPM provides some permanent storage in the form
> of NVRAM. Because the TPM is designed to be as cheap as possible, it has a
> limited number of write cycles. Normally you're meant to store Intel TXT
> launch control policies and sealed keys there

> the goal is to avoid wearing down the drive and extend its useful life.
> Normally it doesn't matter, but if you want to delete data such that it's
> really really gone, it obviously poses a problem. Using TPM NVRAM solves
> it, albiet, at a high usability cost.

If said TPM storage has a 'limited [but unfixed number of write cycles', that
sounds unreliable. It would seem to me that both reliable and 'really gone'
are achievable on platters (or lesser, with ssd) provided the disk was also
encrypted. Nuke that key and it's reliably gone.

------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent
caught up. So what steps can you take to put your SQL databases under
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
_______________________________________________

bitcoin-list mailing list
bitcoin-list@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bitcoin-list