Boot Security Mastery Conference 2026

This presentation examines the practical security of Dynamic Root of Trust for Measurement (DRTM) on AMD-based systems. We begin with an overview of the Trusted Computing Group (TCG) specification and how AMD implements its interpretation of the standard in hardware and firmware. We then present our findings from reverse engineering the DRTM trusted application running on the Platform Security Processor (PSP), highlighting implementation details and security-relevant behaviors. Finally, we discuss our experience with the current state of setting up TrenchBoot as a concrete deployment of DRTM in practice.