bschaatsbergen
writing
about
2026-07-26
A TPM has a clock, but it does not have the time
What tpm2_readclock actually returns on a confidential VM, and why freshness ends up being a nonce.