A TPM2.0 Key Migration Protocol and Security Analysis

SONG Min; TAN Liang

doi:10.3969/j.issn.0372-2112.2019.07.008

您当前的位置：

首页 >

文章列表页 >

A TPM2.0 Key Migration Protocol and Security Analysis

更新时间：2025-07-16

- A TPM2.0 Key Migration Protocol and Security Analysis
- Acta Electronica Sinica Vol. 47, Issue 7, Pages: 1449-1464(2019)
- 作者机构：
  
  1. 四川师范大学计算机科学学院,四川,成都,610101
  2. 中国科学院计算技术研究所,北京,100190
  3. 四川师范大学计算机科学学院,四川,成都,610101
  4. 中国科学院计算技术研究所,北京,100190
- 作者简介：
- 基金信息：
  
  National Natural Science Foundation of China (No.61373162);Science and Technology Support Program of Sichuan Province (No.2014GZ0007);Visual Computing and Virtual Reality Key Laboratory of Sichuan Province (No.KJ201402)
- DOI：10.3969/j.issn.0372-2112.2019.07.008
  CLC： TP309
- Published Online：25 July 2019，
  
  Published：2019
- 稿件说明：
移动端阅览
SONG Min, TAN Liang. A TPM2.0 Key Migration Protocol and Security Analysis[J]. Acta Electronica Sinica, 2019, 47(7): 1449-1464.
DOI：

SONG Min, TAN Liang. A TPM2.0 Key Migration Protocol and Security Analysis[J]. Acta Electronica Sinica, 2019, 47(7): 1449-1464. DOI： 10.3969/j.issn.0372-2112.2019.07.008.

摘要

国际规范《TPM-Rev-2.0-Part-1-Architecture-01.38》允许用户基于密钥复制接口来设计密钥迁移协议以实现芯片间密钥的共享，并在复制过程中通过innerwrap和outerwrap为复制密钥提供机密性、完整性和认证性.然而通过分析发现基于密钥复制接口设计的密钥迁移协议存在三个问题：（1）缺少交互双方TPM的相互认证，会导致密钥能够在敌手和TPM间迁移；（2）当复制密钥的属性encryptedDuplication=0且新父密钥的句柄newParentHandle=TPM_RH_NULL时，复制接口不能实施innerwrap和outerwrap，复制密钥将以明文传输而造成泄露；（3）当新父密钥是对称密钥时，innerwrap中的对称加密密钥以及outerwrap中的密钥种子如何在源TPM与目标TPM之间安全交换，《TPM-Rev-2.0-Part-1-Architecture-01.38》并没有给出具体的解决办法.不仅如此，该协议流程还非常复杂，也无法统一，容易导致复制密钥泄露.针对以上问题，本文提出了基于MAK（Migrate Authentication Key）和复制接口的新密钥迁移协议-MDKMP（Make Duplication Key Migration Protocol）.首先在TPM中的SRK下新增只用于TPM密钥迁移的非对称密钥MAK，并申请相应证书-TPM迁移认证证书；然后基于MAK证书和复制接口设计新的TPM密钥迁移协议MDKMP.MDKMP采用两阶段迁移模式，第一阶段将源TPM密钥迁移到目的TPM的MAK下，第二阶段再将密钥迁移到新父密钥下.

Abstract

TPM specification allows users to design key migration protocol to share keys

and the key is provided with confidentiality

integrity and authentication through innerwrap and outerwrap process. However

it is found that there are three problems in this protocol: (1) lack of authentication

which results in the fact that the key can be migrated between adversary and TPM; (2) when encryptedDuplication=0 and newparentHandle=TPM_RH_NULL

it cannot implement innerwrap and outerwrap

the key will be leakaged; (3) when the new parent key is a symmetric key

how will the symmetric encryption key and the seed exchange securely between the source TPM and the target TPM. To solve the above problems

a new key migration protocol MDMKP is proposed. The MDMKP uses a two-phase migration mode. In the first phase

the key is migrated to the MAK of the destination TPM. In the second phase

the key is migrated to the new parent key.

关键词

Keywords

references

Views

313

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Research on Multilevel Security Model Based on Trustworthy State and Its Application

Survey on Chain of Trust of Trusted System

Related Author

FONT

ZHOU Ming-tian

LIU Zhen

TAN Liang

Verdana

FONT face

LI Xiao-yong

WANG Shi-hua

Related Institution

School of Computer Science and Engineering,University.of Electronic Science and Technology.,Chengdu,,China

Institute of Computing Technology,Chinese Academy of Sciences

Key Lab of Visualization in Scientific Computing and Virtual Reality of Sichuan,College of Computer,Sichuan Normal University

Beijing Jiaotong UniversityBeijing 100044China

Sichuan UniversityChengdu 610065China

⁰