TPMs and the Linux Kernel: Unlocking a Better Path to Hardware Security

Explore a comprehensive conference talk that delves into the challenges and solutions for better TPM (Trusted Platform Module) integration with Linux systems. Presented by Ignat Korchagin at NDC Security in Oslo, this 54-minute session examines why TPM adoption remains low despite being common in modern laptops and servers. Learn about the obstacles developers face when interfacing with TPMs, including competing software stacks, lack of standardized key formats, and difficult access configurations. The presentation focuses on innovative approaches to integrate TPMs with Linux Kernel subsystems—specifically the kernel keystore and cryptographic API—to encapsulate complex TPM communications and provide higher-level security primitives that are more accessible to third-party applications. Discover how these improvements can unlock hardware-based security features for everyday applications without requiring developers to master low-level TPM protocols.