TPM 2.0 vulnerabilities

A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker may exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the Endorsement Key (EK). Under certain conditions, this may also enable forgery of TPM 2.0 attestations.

An information leakage vulnerability in the TCG TPM 2.0 reference code could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key and falsify other TPM 2.0 attestations with this key.

A side-channel attack requiring physical presence at the TPM can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key. The vulnerability affects protection of cryptographic keys stored in the TPM.