You don't make your computer suspectible to anybody turning off corporation manufactured closed source piece of hardware.
There are more than enough sources of entropy in computer to get truly random numbers. Linux kernel itself has a decent random number generator based on external events that could be additionally feed with enthropy from other sources like sound card analog noise.
It is not even clear if that TPM ICes really provide better randomness than Linux kernel itself. Ironically, mathematical methods of evaluating randomness are themselves make randomness selected by that methods less random.
One of the best known source of randomness is a zener diode noise feed to sound card input. It is cheap as dirt (<$0.01) and in no way could be anyhow predicted since it is directly thermal noise of semiconductor junction. Unpredictability of nature in itself.
Those who are superparanoid could follow something like that project, f.e. - https://github.com/nicolacimmino/TRNG. It is better than any corporation made HWRNG by definition.
TL;DR: There is no any need to use TPM modules as source of randomness at all, and with high probability TPM modules are more suspectible to be backdoored than any DIY randomness source, from Linux kernel builtin random number generator to any, even less than cent analog noise source connected to soundcard.
Perhaps I missed this, but where does he say that its on purpose.
We wrote our last article about AMD fTPM-induced stuttering on Windows in March 2022. However, subsequently launched AMD CPUs and platforms appear to have inherited the same or similar issues. People with the newest AM5 systems in 2023 are still complaining about stuttering, though without further investigation, we can't be sure whether there is some other root cause. System stuttering can be a huge problem when working with media files since it can interrupt video conferencing and infuriate gamers (among other things).
All the TPM does anyway is protect you from the "bad" actors. It doesnt stop access to the ME part of it.
Thats assuming the chinese didnt put in some backdoor while at the manufacturing plant as well.
Nothing you do on a computer is private anymore.
If I was writing a book, or designing some million dollar invention or something. I sure as hell wouldnt do it on a computer connected to the internet.
You don't make your computer suspectible to anybody turning off corporation manufactured closed source piece of hardware.
There are more than enough sources of entropy in computer to get truly random numbers. Linux kernel itself has a decent random number generator based on external events that could be additionally feed with enthropy from other sources like sound card analog noise.
It is not even clear if that TPM ICes really provide better randomness than Linux kernel itself. Ironically, mathematical methods of evaluating randomness are themselves make randomness selected by that methods less random.
One of the best known source of randomness is a zener diode noise feed to sound card input. It is cheap as dirt (<$0.01) and in no way could be anyhow predicted since it is directly thermal noise of semiconductor junction. Unpredictability of nature in itself.
Those who are superparanoid could follow something like that project, f.e. - https://github.com/nicolacimmino/TRNG. It is better than any corporation made HWRNG by definition.
TL;DR: There is no any need to use TPM modules as source of randomness at all, and with high probability TPM modules are more suspectible to be backdoored than any DIY randomness source, from Linux kernel builtin random number generator to any, even less than cent analog noise source connected to soundcard.
Perhaps I missed this, but where does he say that its on purpose.
All the TPM does anyway is protect you from the "bad" actors. It doesnt stop access to the ME part of it.
Thats assuming the chinese didnt put in some backdoor while at the manufacturing plant as well.
Nothing you do on a computer is private anymore.
If I was writing a book, or designing some million dollar invention or something. I sure as hell wouldnt do it on a computer connected to the internet.
Tell me in layman's terms how hardware such as CPU or motherboard allows unsolicited access to computer hard drive or operating system environment.