[cap-talk] network level designation and authorization, meta

[Karp, Alan H]

Jed wrote:
> 
> For me what comes to mind is a hardware facility (could be on chip
> or sort of an "accelerator" on the bus) that stores a private key and
> performs the required cryptographic transformations safely outside of
> memory.  However, there still seems to be a difficulty 
> getting the private
> key information into such a transformation engine and storing and
> retrieving such private keys.  I don't know how to do that safely.
> 
The TPM, https://www.trustedcomputinggroup.org/home, is just such a
device.  I've never studied the protocols, but some smart people have.
It ships with systems from many vendors, including HP,
http://h20331.www2.hp.com/Hpsub/cache/292199-0-0-225-121.html.

_________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories 
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp/
  
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Karp, Alan H.vcf
Type: text/x-vcard
Size: 423 bytes
Desc: Karp, Alan H.vcf
Url : http://www.eros-os.org/pipermail/cap-talk/attachments/20060622/bf4b0db0/attachment.vcf