wolfTPM in Bare-Metal to Enable Measured Boot

wolfBoot can use the wolfTPM 2.0 software interface in bare metal environments and take advantage of your pre-existing TPM silicon, including Microchip’s ATTPM20P, ST33TP*, Infineon SLB9670 and Nations Tech Z32H330TC modules.

Measured Boot uses the TPM Platform Configuration Registers (PCR)? to determine if the boot parameters remain the same. The PCR’s allow SHA-1 or SHA-256? hash reset, update and read. There are typically 24 of these PCR’s available.

wolfTPM and wolfBoot support use in a bare-metal environment with no external dependencies. This enables reduced code size, minimal attack surfaces and ease of maintenance.

If you have any questions or run into any issues, contact us at facts@wolfssl.com, or call us at +1 425 245 8247.