Learn in the textbookSecurity Testing and IoT / Hardware Protection
DefinitionA TPM (Trusted Platform Module) is a security chip built into PCs and IoT devices that stores encryption keys internally and carries out cryptographic processing inside the chip.
ExplanationBecause the key never leaves the chip during processing, and the chip itself is built to resist reading from outside, the key is harder to steal than one stored by software. One use is protecting the key for full-disk encryption.
AnalogyLike leaving an important seal in a bank's safe-deposit vault and having documents stamped only inside the vault room. The seal itself never comes out.
Memory hookTrusted Platform Module: a module mounted on the device (platform) that serves as the anchor of trust (trusted). It is often just called a TPM chip.