AMD's TEE Driver For Loading "Trusted Applications" On Their Secure Processor Under Linux

[phoronix]

Phoronix: AMD's TEE Driver For Loading "Trusted Applications" On Their Secure Processor Under Linux

A few weeks back AMD quietly published a TEE "Trusted Execution Environment" driver for APUs on Linux for utilizing the controversial AMD Secure Processor...

http://www.phoronix.com/scan.php?page=news_item&px=AMD-TEE-Linux-Driver-Secure

[Danny3]

No wonder they quietly published this!

[agd5f]

I'm not sure what qualifies as "quietly". It was posted to LKML.

[Michael]

I'm not sure what qualifies as "quietly". It was posted to LKML.

Hadn't meant quietly per se, more along the lines of under-the-radar but not exactly... A short alternative to "I or my scripts didn't notice this patch series until now, nor did any other 'media' spot this patch series". But in any case, I just removed 'quietly' to avoid confusion.

[R41N3R]

Who is allowed to sign these so called trusted applications? And how are these blobs loaded/installed on a system?

[juno]

Hey AMD! Libreboot. When?

[ThoreauHD]

I guess it's better to have than not to have. The price for admission for locked down corp env's.

[starshipeleven]

Hey AMD! Libreboot. When?

Even just Coreboot support would be better than nothing. They don't release their AGESA blob for Ryzen so there is really no other option than vendor UEFI.

[starshipeleven]

Who is allowed to sign these so called trusted applications?

Companies that need this and can pay AMD to get signed with their key.

And how are these blobs loaded/installed on a system?

It's an application, so it will be installed by the user or distro maintainer

[S.Pam]

Hi @Michael,

Could you write something about the new Vulnerability in the Intel TPM?

https://tpm.fail/