tpm
AI security interview questions tagged tpm, across every topic.
3 questions · 0 unlocked for you
Concepts behind "tpm"
Explanations of the mechanisms these questions rely on.
Core
Secure Boot, Measured Boot and Remote Attestation in DepthSecure boot enforces: each stage runs the next only if it is signed and not revoked. Measured boot records: each stage extends a hash into a TPM register, blocking nothing by itself. Attestation proves that record to a remote verifier with a fresh nonce. A patched but still-signed boot component stays usable until it is revoked, which is why BlackLotus worked. PCR values break on every update, so policies use event logs or signatures. Confidential AI uses the same chain to release model weights only to attested machines. Systems & OS SecuritySign in
Core
Hardware Roots of Trust and Key CustodyTPMs support platform identity and measured boot; TEEs, secure enclaves and HSMs can protect non-exportable keys and enforce usage policies. Their guarantees depend on the hardware, configuration and attacker access. Separate resistance to key extraction from authority to use a key. Add narrow caller permissions, authentication or approval where needed, and operation logs. Attestation lets a verifier evaluate key provenance and measured platform state against policy. Cryptography & PKISign in