SHA-1 Uses in TPM v1.2
White Paper
This document catalogs the usages of SHA-1 in the TPM v1.2 specifications and assesses the impact of the collision attacks discovered in 2005 against them. In general the TCG took several precautions to guard against collision attacks, such as concatenating fresh randomly generated values or randomly generated values unknown to the outside to the data before hashing.
Also, the use of fixed structures in the data impedes the ability of an attacker to manipulate the data to effectively carry out a collision attack.
We did find one corner case in which the RSA signature command may hash the input before signing. In this case the TCG inadvertently chose a value outside of the TPMÍs control to concatenate to the data before signing. Had they been consistent in choosing a fresh randomly generated value, there would be no problem here. Otherwise, the TPM uses SHA-1 in a manner that protects the TPM and its responses from the SHA-1 collision attacks.
Explore other guides & white papers
Guide
Trusted Platform Module 2.0: A Brief Introduction
White Paper
Implementing Hardware Roots of Trust
White Paper
How to Use the TPM: A Guide to Hardware-Based Endpoint Security
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.