Which specification provides secure hardware-based storage of encryption keys, hashed passwords, and other user- and platform-identification information?

Which specification provides secure hardware-based storage of encryption keys, hashed passwords, and other user- and platform-identification information?

• A. Trusted Platform Module (TPM)
• B. Secure Enclave
• C. Escrow
• D. Data at Rest

Answer: (A)

Secure, hardware-backed storage of keys and identity data is provided by the Trusted Platform Module, a standardized hardware security module defined by the Trusted Computing Group. The TPM securely holds encryption keys, as well as credentials like hashed passwords and other user- and platform-identification information, inside tamper-resistant hardware. Keys used by the system can be created, used, or sealed within the TPM, and they don’t leave the chip in plaintext. This enables protections like disk encryption keys that can be released only when the platform is in a trusted state and the ability to attest the platform’s integrity to other parties. In short, the TPM provides a trusted, hardware-based store for sensitive cryptographic material and identity data. Other options describe related ideas but not the same hardware-backed standard: Secure Enclave offers similar protection on Apple devices but is a vendor-specific implementation, Escrow refers to outsourcing key storage to a third party, and Data at Rest is a security state rather than a hardware storage mechanism.

Secure, hardware-backed storage of keys and identity data is provided by the Trusted Platform Module, a standardized hardware security module defined by the Trusted Computing Group. The TPM securely holds encryption keys, as well as credentials like hashed passwords and other user- and platform-identification information, inside tamper-resistant hardware. Keys used by the system can be created, used, or sealed within the TPM, and they don’t leave the chip in plaintext. This enables protections like disk encryption keys that can be released only when the platform is in a trusted state and the ability to attest the platform’s integrity to other parties. In short, the TPM provides a trusted, hardware-based store for sensitive cryptographic material and identity data.

Other options describe related ideas but not the same hardware-backed standard: Secure Enclave offers similar protection on Apple devices but is a vendor-specific implementation, Escrow refers to outsourcing key storage to a third party, and Data at Rest is a security state rather than a hardware storage mechanism.