Towards Formal Verification of a TPM Software Stack - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Towards Formal Verification of a TPM Software Stack

Résumé

The Trusted Platform Module (TPM) is a cryptoprocessor designed to protect integrity and security of modern computers. Communications with the TPM go through the TPM Software Stack (TSS), a popular implementation of which is the open-source library tpm2-tss. Vulnerabilities in its code could allow attackers to recover sensitive information and take control of the system. This paper describes a case study on formal verification of tpm2-tss using the Frama-C verification platform. Heavily based on linked lists and complex data structures, the library code appears to be highly challenging for the verification tool. We present several issues and limitations we faced, illustrate them with examples and present solutions that allowed us to verify functional properties and the absence of runtime errors for a representative subset of functions. We describe verification results and desired tool improvements necessary to achieve a full formal verification of the target code.
Fichier principal
Vignette du fichier
preprint.pdf (430.23 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Licence : CC BY NC ND - Paternité - Pas d'utilisation commerciale - Pas de modification

Dates et versions

hal-04176159 , version 1 (10-08-2023)

Licence

Paternité - Pas d'utilisation commerciale - Pas de modification

Identifiants

Citer

Yani Ziani, Nikolai Kosmatov, Frédéric Loulergue, Daniel Gracia Pérez, Téo Bernier. Towards Formal Verification of a TPM Software Stack. 18th International Conference on integrated Formal Methods (iFM), Nov 2023, Leiden, Netherlands. ⟨10.1007/978-3-031-47705-8_6⟩. ⟨hal-04176159⟩
62 Consultations
23 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More