On the Feasibility of T-PKI as an Anonymization Protocol for TPMs in Trusted Computing Environments
Art Sedighi, Thomas Daniels, Doug Jacobson · 2022
The feasibility of the Transactional Public Key Infrastructure (T-PKI) cryptographic scheme as the means to anonymize attestation in a trusted computing environment is assessed. T-PKI encryption scheme creates a new public key for every transaction from the same private key. T-PKI would allow a TPM to send anonymous attestations to a verifier, thus not revealing any information about the origin of the attestation. A functional implementation of the T-PKI encryption scheme based on the Python programming language along with General Multi-Precision Arithmetic (GMP) library for large arithmetic operations, and Numeric Python (NumPy) for matrix calculations is presented. An implementation of the Learning with Errors using the same interface is also presented to compare the output from both cryptographic schemes. Both methods utilize a 384-bit secret for encryption and can encrypt a character (7-bits) simultaneously.