Infineon Technologies AG has enabled a new open source software stack. It makes work easier for developers who want to use the Trusted Platform Module (TPM) 2.0, a standardized hardware-based security solution for securing industrial, automotive and other applications such as network equipment. This is the first open source TPM middleware that complies with the Software Stack (TSS) Enhanced System API (ESAPI) specification of the Trusted Computing Group (TCG), providing significant value to the open source community.
“The ease of integration on Linux and other embedded platforms that comes with the release of the TPM 2.0 ESAPI stack speeds up the adoption of TPM 2.0 in embedded systems such as network equipment and industrial systems,” said Gordon Muehl, Global CTO Security at Huawei. “This takes IoT security to the next level.”
“We are currently seeing great interest in enhancing the security of IoT, IIoT, Industry 4.0 and automotive applications,” said Michael Roeder, Manager Technology Engineering and Services at Avnet Silica. “The availability of the open source TSS ESAPI layer simplifies the integration of TPM 2.0 in all kinds of applications and is well aligned to our own open source approach to security.”
Making the TSS ESAPI layer available to everyone is part of Infineon´s commitment to ease the integration and wide adoption of strong security. This is further supported by security experts and industry leaders of the Infineon Security Partner Network (ISPN). The ISPN offers a wide variety of software libraries meeting the requirements of different applications and target platforms.
Based on the ESAPI layer, the stack includes support for OpenSSL. It can use the Infineon OPTIGA TPM to protect device communication secured with SSL/TLS via a standardized interface by deploying TPM 2.0 as a secured key store for OpenSSL. It thus protects the keys from vulnerabilities like the famous Heartbleed bug.
“With the release of the TSS, we have reached a milestone for providing enhanced protection of embedded systems in areas such as industry, automotive, or smart home using the TPM 2.0,” said Andreas Fuchs, Project Leader at Fraunhofer SIT.
 2.0, a standardized hardware-based security solution for securing industrial, automotive and other applications such as network equipment.){kind=link}