SECAI Core · phase 10 of 15 · noun

Trusted platform module

Specification for secure hardware-based storage of encryption keys, hashed passwords, and other user- and platform-identification information.

The Explain card

Plain English
A TPM is a specification for a secure hardware chip that stores encryption keys, hashed passwords, and platform identity data, and that can attest to what software booted on the machine.
Example
An edge device running a vision model uses its TPM to seal the disk encryption key to a known-good boot state. If someone tampers with the bootloader to swap in a modified model, the TPM refuses to release the key.
Why it matters
AI increasingly runs on laptops, robots, and edge boxes that attackers can physically touch. A TPM anchors device identity and integrity so defenders can trust where a model is running.
Hook
The chip that swears on oath what the machine booted.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

During secure boot, the trusted platform module checks measured firmware values before releasing the disk-encryption key.

Why these words
  • trusted Old Norse traust, confidence or protection, plus English -ed marks the platform component as relied upon within the security design
  • platform Middle French plateforme, flat form identifies the computing system whose integrity is being assessed
  • module Latin modulus, small measure names the component as a distinct functional unit
Where it came from
Origin
an English technical phrase standardized by the Trusted Computing Platform Alliance
Entered the language
2000s
What changed
The older words for reliance, a supporting base, and a self-contained unit were combined as the formal name of a trusted-computing component.
How it is spelled
Pattern
trusted adds -ed to trust without changing the base spelling
Pattern
the three words form an open compound and remain separately spelled

Spelled like

  • trusted computing base
  • trusted execution environment
  • hardware security module
Broken into chunks
  • trust
    • distrust
    • trustworthy
  • form
    • formation
    • transform
  • module
    • modular
    • modularity
What it sits beside

Same subject

  • secure boot
  • measured boot
  • remote attestation
  • platform configuration register

Same shape

hardware security components

trusted computing operations

  • measured boot
  • remote attestation

Where it sits in the deck

Phase 10: Identity, Access, and Cryptographic Foundations

Before examining threats to systems, establish the foundational security primitives — identity, authentication, authorisation, and the cryptography underpinning them.

Neighbours in this phase