Security Basics: Re: Hard disk Encryption

["Ali, Saqib" <docbook.xml () gmail com>]

> Since TPM does not have enough processing power to decrypt the
> raw data, the key (used to decrypt the data) has to be
> transmitted outside of the TPM.
Not really. IBM's TPM chip can handle bulk data decryption and
encryption easily.

> Due to the first assumption, the CPU can be emulated by an
> attacker so that external entities cannot distinguish it from
> the "normal" CPU; due to the second assumption, after such an
> emulation the attacker may have exactly the same secret key.
This is a extremely hypothetical scenario, and I am not even sure if
it will work. Has somebody proved that such a attack is possible?

saqib
http://www.full-disk-encryption.net