[dlgeek]

> What is there to gain "cracking" the TPM itself, if you can get the keys fine by sniffing?

The ability to forge remote attestations by extracting the endorsement key or various attestation identity keys that never leave the TPM in plaintext.

[thisacctforreal]

Ah I see, they can successfully protect asymmetric crypto but not symmetric.