TPM的两个主要密码授权协议的安全性分析与改进

Security Analysis and Improvement of the TPM's Two Main Authorization Protocols

可信计算的主要功能是由可信平台模块(TPM)完成的。对象无关授权协议(OIAP)、特定对象授权协议(OSAP)是TPM在可信计算平台中运行的基础,确保这些协议的安全运行是极为重要的。本文对这两个授权协议进行了逻辑描述并对其安全性进行了分析,针对协议的安全隐患提出了相应的改进方法。

The main function of trusted computing is done by the trusted platform module. For the working of TPM is based on the OIAP and OSAP protocol, it is most important to ensure the secure working of the two protocols. This article does logic description and security analysis on the two protocols, then presents some ways to protect the two protocols from being attacked.