TrouSerS

TrouSerS
Name	TrouSerS
Title	TrouSerS
Developer	TOSHIYUKI KAWATA; Linux Foundation contributors
Released	2003
Operating system	Linux, FreeBSD, Android
Programming language	C (programming language), C++
License	BSD licenses

TrouSerS is an open-source software project that implements a TCG/TSS stack for Trusted Computing Group specifications, providing a middleware layer that interfaces TPM devices with higher-level applications. It enables integration between Linux-based distributions, FreeBSD, and embedded systems such as Android by exposing standardized APIs and tools for attestation, key management, and secure storage. TrouSerS has been used in academic research, industry prototypes, and interoperability testing with hardware vendors and standards bodies.

Overview

TrouSerS provides a TSS (Trusted Computing Software Stack) conformant implementation that mediates between Trusted Computing Group-compliant Trusted Platform Module hardware and userland applications. The project supplies daemons, libraries, command-line tools, and bindings to enable services like key creation, signing, and platform attestation for platforms including Intel-based servers, ARM-based devices, and embedded boards from vendors such as Dell, HP, Lenovo, and IBM. It interoperates with boot frameworks like GRUB and remote attestation infrastructures used by projects connected to OpenStack, Eucalyptus, and other cloud stacks.

History and Development

TrouSerS originated in the early 2000s amid efforts by contributors from academia and industry to implement the Trusted Computing Group's TSS specification. Early development involved contributors affiliated with institutions and companies such as Microsoft Research, Intel Corporation, IBM Research, Oak Ridge National Laboratory, and university groups at University of Cambridge, University of Oxford, and ETH Zurich. The codebase evolved through collaborations with projects like OpenSSL, GNOME, KDE, Debian, and Fedora Project packaging teams. Over time, maintenance responsibilities shifted among independent developers, vendor engineers, and community volunteers, with discussions occurring on mailing lists hosted by organizations including the Linux Foundation and Apache Software Foundation lists.

Architecture and Components

The stack follows a layered architecture comprising a daemon, native libraries, and command-line utilities. Core components include the main daemon that manages access to the TPM hardware, the TSS API-compatible libraries used by applications such as sshd, OpenSSH, and GnuPG integrations, and utilities for key provisioning and quote generation. TrouSerS interacts with kernel interfaces such as Device Mapper-style nodes and leverages cryptographic primitives provided by libraries like OpenSSL and libgcrypt. Development tooling has interfaced with build systems such as Autoconf, Automake, and CMake to support cross-compilation for platforms including x86_64, ARMv7, and AArch64.

Implementations and Platforms

TrouSerS has been ported to multiple operating systems and hardware platforms. Notable platform ports include Ubuntu, Debian, CentOS, Red Hat Enterprise Linux, SUSE Linux Enterprise, and appliance-oriented systems used by vendors like Cisco Systems and Juniper Networks. Embedded platform integrations targeted Android devices, OpenWrt routers, and industrial controllers built on chips from NXP Semiconductors, Broadcom, and Qualcomm. Interoperability testing involved TPM implementations from manufacturers such as Infineon Technologies, STMicroelectronics, and Nuvoton Technology.

Security Features and Use Cases

TrouSerS exposes functionality used for remote attestation, secure key storage, sealed storage, and measured boot workflows. Use cases include platform integrity verification for cloud providers like Amazon Web Services and Google Cloud Platform; trusted boot chains in enterprise laptops from Dell and Lenovo; digital rights management prototyping with media firms; and research deployments at institutions such as MIT, Stanford University, and Carnegie Mellon University. It supports attestation protocols that interoperate with frameworks developed by IETF working groups and standards bodies including IEEE committees and government labs like NIST.

Performance and Evaluation

Performance characteristics depend on TPM hardware generation (discrete TPM 1.2, TPM 2.0, firmware TPM implementations such as Intel PTT and AMD fTPM), system bus latency, and cryptographic backends. Evaluations in academic papers and vendor whitepapers compared TrouSerS-mediated operations to proprietary stacks from hardware vendors; metrics considered included key generation latency, quote creation time, and throughput under concurrent workloads on platforms from HP and Lenovo. Optimization efforts focused on reducing daemon context switches, caching transient objects, and leveraging hardware acceleration features in processors from Intel and ARM Holdings.

Licensing and Maintenance

TrouSerS has historically been distributed under permissive licenses originating from BSD-style terms, enabling incorporation into distributions such as Debian GNU/Linux and commercial products from vendors. Maintenance has been community-driven, with patches and forks appearing on hosting services and cooperation among contributors from entities like Red Hat, Canonical (company), and independent maintainers. Ongoing stewardship and security advisories have occasionally involved coordination with standards organizations including the Trusted Computing Group and national vulnerability databases maintained by agencies such as US-CERT.

Category:Trusted computing software