TPMScan: A wide-scale study of security-relevant properties of TPM 2.0 chips

The Trusted Platform Module (TPM) is a widely deployed computer component that provides increased protection of key material during cryptographic operations, secure storage, and support for a secure boot with a remotely attestable state of the target machine. A systematic study of the TPM ecosystem, its cryptographic properties, and the orderliness of vulnerability mitigation is missing despite its pervasive deployment – likely due to the black-box nature of the implementations. We collected metadata, RSA and ECC cryptographic keys, and performance characteristics from 78 different TPM versions manufactured by 6 vendors, including recent Pluton-based iTPMs, to systematically analyze TPM implementations. Surprisingly, a high rate of changes with a detectable impact on generated secrets, the timing of cryptographic operations, and frequent off-chip generation of Endorsement Keys were observed. Our analysis of public artifacts for TPM-related products certified under Common Criteria (CC) and FIPS 140 showed relatively high popularity of TPMs but without explanation for these changes in cryptographic implementations. Despite TPMs being commonly certified to CC EAL4+, serious vulnerabilities like ROCA or TPM-Fail were discovered in the past. We found a range of additional unreported nonce leakages in ECDSA, ECSCHNORR, and ECDAA algorithms in dTPMs and fTPMs of three vendors. The most serious discovered leakage allows extraction of the private key of certain Intel’s fTPM versions using only nine signatures with no need for any side-channel information, making the vulnerability retrospectively exploitable despite a subsequent firmware update. Unreported timing leakages were discovered in the implementations of ECC algorithms on multiple Nuvoton TPMs, and other previously reported leakages were confirmed. The analysis also unveiled incompleteness of vulnerability reporting and subsequent mitigation with missing clear information about the affected versions and inconsistent fixes

Relationship Between Deformation Moduli Obtained Using Light Falling Weight Deflectometer and Static Plate Test on Various Types of Soil

There is increasing effort to optimize test methods for evaluation of subgrade. It takes effect in aspiration in replacement of static plate loading test by other faster test methods. One of them is the use of Light Falling Weight Deflectometer. In many countries in Europe both static and dynamic plate tests are standardized. The presented paper introduces results of the research project dealing with the sensitivity of the relationship between static modulus and modulus obtained from the Light Falling Weight Deflectometer on specific types of soil. It is shown that there are significant differences in relationship between moduli values obtained using both methods on different types of soil

Application of Electronic Data Collection in Research of Socio-Economic Importance of Forest Functions

The main topic of the project is the application of electronic data collection using the web interface to the research of the socio-economic importance of forest functions. A unique system for data collection, the provision of evidence and processing was designed. The system leads to the simplification of the research, to the possibility of extending the investigation in the field and to the survey of forest visit trends in the long term. The approach will enable the formation of an extended database. The paper describes the steps of the project’s implementation. The e-survey started at the end of September 2010 continues to this time

Comparative measurements of ground penetrating radars used for road and bridge diagnostics in the Czech Republic and France

The paper describes the current situation regarding the comparative measurement and accuracy of ground penetrating radars (GPR). GPR measurements are used for non-destructive diagnostic of roads and bridges, specifically for measuring pavement layer thickness and determining the location and position of reinforcement in concrete. The information used in the paper is based on the performed in-situ measurements. The conclusion includes recommendations of how to perform and evaluate the in-situ GPR comparative measurements

Innovative inspection procedures for effective GPR surveying of critical transport infrastructures (pavements, bridges and tunnels)

This project is in line with the interests of one of the four working groups’ activities within the COST Action project TU1208. The project concerns diagnostics of transport infrastructure structures pavements, bridges and tunnels by ground penetrating radar (GPR). It includes individual applications which are currently in use and those which are still in the phase of research and verification. Furthermore, it introduces issues which need to be dealt with, so that this NDT method can be applied to a greater extent in this area

Modelove metody projektovani - modelove a zobrazovaci techniky.

Available from STL Prague, CZ / NTK - National Technical LibrarySIGLECZCzech Republi

Faremní zpracování mléka v ekologickém zemědělství

Cílem příručky je podat ucelené informace o možnostech faremního zpracování mléka a prodeji ze dvora. Příručka neslouží jako pevně stanovený návod, svou cestu si každý musí najít sám, ale pomůže vám zorientovat se v legislativě, zodpovědět si všechny možné otázky než v podnikání začnete a udělat si představu o tom, co vše budete muset splnit a zabezpečit. Pokud si pravdivě a realisticky odpovíte všechny otázky v příručce zmíněné, zjistíte potřebné požadavky pro vlastní realizaci prvního prodaného produktu. K tomu, aby cesta k jeho získání nebyla složitá a zdlouhavá, by vám měla posloužit tato metodika

Local Cyclic Voltammetry of a Langmuir-Blodgett Film on Water

An electrochemical Langmuir-Blodgett trough that permits an examination of local redox processes in a layer floating on the surface of water with an STM-tip ultramicroelectrode has been constructed and tested on a layer of 1,1\u27-dicarbooctadecyloxyferrocene