68
Linux Now Disabling TPM Bus Encryption By Default For Performance Reasons
(www.phoronix.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 10 Oct 2025
68 points (100.0% liked)
Linux
10440 readers
519 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
@possiblylinux127 And allows to decrypt the disk if someone steals your laptop: it can just turn it on to read it...
That isn't how TPMs work
The TPM checks the signature of the software with the signature it has internally. If that signature changes it will refuse to release the keys.
@possiblylinux127 Exactly. So if someone steals your laptop it can just press the power on button to read your disk. Security my ass.
...if they can log in
@possiblylinux127
Call this security... It's just a marketing lock-in strategy. A good old password is all you need for encrypting a disk.
...Except none of that is true