While Tarnovsky says that Infineon has so far said such attacks just weren't feasible, Peter Laackmann, Infineon's Senior Principal for Chip Cards & Product Security, in an interview with The H's associates at heise Security, denied this is the case. However, retrieving the license key of an XBox 360, which also contains Infineon's TPM, apparently only required an additional six hours. This took Tarnovsky the better part of six months and numerous TPM chips. Subsequently, he analysed the on-chip signalling pathways to obtain access to the processor's data bus. He then worked his way through the different layers of the chip using, for instance, a Focused Ion Beam microscope and Photoshop to figure out the chip's structure and find a way into the heart of the TPM. For this purpose, he extracted the actual chip from the housing in his special lab using various procedures that involved liquids and gases (a video about this is available online). He apparently managed to suss out a processor in the ' SLE 66CLX360PE' family used in the TPM. Previously known as the smart card hacker, Christopher Tarnovsky of Flylogic Engineering has presented his work at the Black Hat DC security conference. Once the keys are retrieved, however, an attacker can read the encrypted data stored on a hard disk without needing a password. TPM hardware incorporates various levels of logical as well as physical measures designed to counter a range of attacks, such as differential electromagnetic analyses (DEMA) and even physical intrusions. He was able to read the data stored on the TPM chip, for instance cryptographic keys (RSA, DES) such as those also used by Microsoft's BitLocker on appropriate motherboards.

An American hacker has, with a great deal of effort, managed to crack a Trusted Platform Module (TPM) by Infineon.

Tpm bitlocker hack