Open source TPM 2.0 stack eases security adoption for cars
The company claims that the stack is the first open source TPM middleware that complies with the Software Stack (TSS) Enhanced System API (ESAPI) specification of the Trusted Computing Group (TCG).
Making the TSS ESAPI layer freely available will help ease integration and increase adoption. Infineon funded the development of the ESAPI by Fraunhofer Institute for Secure Information Technology SIT. The ESAPI layer is based on the SAPI layer developed by Intel Corporation. It includes a new layer of API functions to simplify the use and integration of the TPM. It facilitates establishing a connection with the TPM through an application, secured communication between the host CPU and the TPM, and authorization using message authentication codes (HMAC).
Based on the ESAPI layer, the stack includes support for OpenSSL. It can use the Infineon OPTIGA TPM to protect device communication secured with SSL/TLS via a standardised interface by deploying TPM 2.0 as a secured key store for OpenSSL. It thus protects the keys from vulnerabilities like the famous Heartbleed bug.
The TSS stack and ESAPI layer are published under the permissive 2-clause BSD license. The ESAPI has been designed and validated by a wide community to achieve a high level of quality and stability. With industrial and automotive customers in mind, the code was developed using industry standards, continuous integration and testing, a thorough two-person review process, and static code analyzers like clang and Coverity. In addition, the stack was tested and evaluated on Infineon OPTIGA TPM SLB 9670 with the latest TPM specifications. Future enhancements will include support for Cryptsetup/LUKS disk encryption and a version featuring ESAPI support for TPM tools.
More information
Related news
Fanless DIN-rail embedded PC is optimised for control cabinets
IoT security tie up pairs Icon PKI with Infineon’s Trusted Platform Modules
Small, secure and robust IIoT platform
If you enjoyed this article, you will like the following ones: don't miss them by subscribing to :
