Record · corpus.blog/posts/01a0876a-8c6a-72ca-9a2c-c56512d1db78

FAQ: What is a TPM and how can I use it on Linux?

debugging.works · published 1 June 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at debugging.works Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 63
Words captured: 9,358

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://debugging.works//blog/windows-bitlocker/

debugging.works

https://gist.github.com/kmille/1bc2e4b84adac13f4cc529e9f0b6391a

gist.github.com

https://wiki.archlinux.org/title/Trusted_Platform_Module

wiki.archlinux.org

https://systemd.io/CREDENTIALS/

systemd.io

https://fahrplan.events.ccc.de/congress/2019/Fahrplan/system/event_attachments/attachments/000/004/103/original/36c3-hacking-tpm.pdf

fahrplan.events.ccc.de

https://netzpolitik.org/2023/indymedia-linksunten-ohne-aussicht-auf-entschluesselungserfolg/

netzpolitik.org

https://support.apple.com/en-gb/guide/security/sec4c6dc1b6e/1/web/1

support.apple.com

https://support.apple.com/en-gb/guide/security/sec59b0b31ff/web

support.apple.com

https://uapi-group.org/specifications/specs/linux_tpm_pcr_registry/

uapi-group.org

https://www.man7.org/linux/man-pages/man1/systemd-cryptenroll.1.html

man7.org

https://systemd.io/TPM2_PCR_MEASUREMENTS/

systemd.io

https://wiki.archlinux.org/title/Dm-crypt/System_configuration

wiki.archlinux.org

https://github.com/systemd/systemd/pull/29965

github.com

https://github.com/systemd/systemd/pull/24146

github.com

https://man.archlinux.org/man/systemd-measure.1

man.archlinux.org

https://man.archlinux.org/man/systemd-cryptenroll.1

man.archlinux.org

https://man.archlinux.org/man/ukify.1.en

man.archlinux.org

Unlocking LUKS2 volumes with TPM2, FIDO2, PKCS#11 Security Hardware on systemd 248 Read at the source ↗

0pointer.net

Authenticated Boot and Disk Encryption on Linux Read at the source ↗

0pointer.net

Brave New Trusted Boot World Read at the source ↗

0pointer.net

https://github.com/systemd/systemd/issues/37051

github.com

https://gist.github.com/jdoss/777e8b52c8d88eb87467935769c98a95?permalink_comment_id=4719209

gist.github.com

https://community.frame.work/t/guide-setup-tpm2-autodecrypt/39005

community.frame.work

https://web.archive.org/web/20260606040528/https://blog.securityinnovation.com/preventing-initramfs-attacks-tpm

web.archive.org

https://www.youtube.com/watch?v=hXblxnDS6eU

youtube.com

https://pulsesecurity.co.nz/advisories/tpm-luks-bypass

pulsesecurity.co.nz

https://github.com/microsoft/secureboot_objects/tree/798cdc513e0c192fe90e99637105748ed3bb4ca5/PreSignedObjects/DB/Certificates

github.com

https://wiki.ubuntu.com/UEFI/SecureBoot/ShimUpdateProcess

wiki.ubuntu.com

https://wiki.archlinux.org/title/Dm-crypt/Encrypting_an_entire_system

wiki.archlinux.org

https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

wiki.archlinux.org

https://tpm.fail/

tpm.fail

https://www.athene-center.de/forschung/publikationen/faultpm-exposing-amd-ftpms-deepest-secrets-4388

athene-center.de

https://en.wikipedia.org/wiki/Cold_boot_attack

en.wikipedia.org

https://www.orangecyberdefense.com/ch/insights/events/tpm-sniffing-workshop

orangecyberdefense.com

https://hands-on-security.com/

hands-on-security.com

https://github.com/NoobieDog/TPM-Sniffing

github.com

https://github.com/systemd/systemd/pull/22630

github.com

https://mastodon.social/@pid_eins/113406531734848110

mastodon.social

https://www.youtube.com/watch?v=FotdLSoucXc

youtube.com

https://security.stackexchange.com/questions/253776/why-does-windows-not-enable-tpm-2-0-parameter-encryption-to-protect-against-bus

security.stackexchange.com

https://blog.scrt.ch/2024/10/28/privilege-escalation-through-tpm-sniffing-when-bitlocker-pin-is-enabled/

blog.scrt.ch

https://media.ccc.de/v/38c3-windows-bitlocker-screwed-without-a-screwdriver

media.ccc.de

https://neodyme.io/en/blog/bitlocker_screwed_without_a_screwdriver/

neodyme.io

https://github.com/andigandhi/bitpixie.git

github.com

https://github.com/martanne/bitpixie.git

github.com

https://www.youtube.com/watch?v=drCo-S4_iNs

youtube.com

BitUnlocker: Leveraging Windows Recovery to Extract BitLocker Secrets (39c3) Read at the source ↗

media.ccc.de

https://thehackernews.com/2026/05/microsoft-releases-mitigation-for.html

thehackernews.com

https://walian.co.uk/arch-install-with-secure-boot-btrfs-tpm2-luks-encryption-unified-kernel-images.html

walian.co.uk

GrapheneOS's auto reboot feature for Linux laptops Read at the source ↗

debugging.works

How to Yubikey: a configuration cheatsheet Read at the source ↗

debugging.works

https://github.com/PrivSec-dev/privsec.dev/pull/244

github.com

https://4fa2b80c.privsec-dev-2oz.pages.dev/posts/knowledge/laptop-hardware-security/

4fa2b80c.privsec-dev-2oz.pages.dev

https://ieeexplore.ieee.org/document/10190531

ieeexplore.ieee.org

https://bugs.launchpad.net/ubuntu-desktop-provision/+bug/2058147

bugs.launchpad.net

Bypassing disk encryption on systems with automatic TPM2 unlock Read at the source ↗

oddlama.org

https://news.ycombinator.com/item?id=42733640

news.ycombinator.com

https://www.reddit.com/r/linux/comments/1i2pf38/bypassing_disk_encryption_on_systems_with/

reddit.com

https://www.youtube.com/watch?v=vT2uw25o0uM

youtube.com

https://github.com/systemd/systemd/issues/42932

github.com

https://mullvad.net/de/help/how-tamper-protect-laptop

mullvad.net

https://media.ccc.de/v/33c3-8314-bootstraping_a_slightly_more_secure_laptop?utm_source=chatgpt.com

media.ccc.de

https://www.buymeacoffee.com/kmille

buymeacoffee.com