Skip to content

v2.2.0 - TPM Dual-Mode Hardware Fingerprinting

Choose a tag to compare

View all tags
@Johnsonajibi Johnsonajibi released this 21 Dec 05:42
· 32 commits to main since this release
v2.2.0
36a6557

Device Fingerprinting Pro v2.2.0

Release Date

December 21, 2025

Overview

Major feature release introducing TPM (Trusted Platform Module) hardware fingerprinting with dual-mode enforcement architecture.

What's New

TPM/Secure Hardware Fingerprinting

Added hardware-backed device identification using platform-specific secure hardware:

Dual-Mode Architecture

  • Mode A - Software (Default): Optional TPM usage with graceful fallback, works on all platforms
  • Mode B - TPM-Strict: Mandatory TPM requirement with explicit failure, for high-security deployments

Cross-Platform TPM Detection

  • Windows: TPM 2.0 via PowerShell Get-Tpm cmdlet and WMI fallback
  • macOS: Secure Enclave detection (T2 chip, Apple Silicon)
  • Linux: TPM 2.0 via /sys/class/tpm filesystem interface

Privacy-Preserving Obfuscation

  • SHA-256 hashing of hardware IDs
  • No raw TPM data exposed in fingerprints

New API Functions

import device_fingerprinting as df

# Enable TPM fingerprinting
df.enable_tpm_fingerprinting(enabled=True)

# Check if TPM is enabled
df.is_tpm_enabled()

# Get detailed TPM status
status = df.get_tpm_status()

# Generate fingerprint with mode selection
fingerprint = df.generate_fingerprint(method="stable", mode="software")  # or "tpm_strict"

New Files

  • src/device_fingerprinting/tpm_hardware.py - TPM detection and fingerprinting module (505 lines)
  • examples/tpm_example.py - Basic TPM usage examples
  • examples/dual_mode_enforcement.py - Comprehensive dual-mode demonstration
  • test_tpm_simple.py - TPM integration tests
  • test_dual_mode.py - Dual-mode architecture tests
  • TPM_INTEGRATION.md - Technical documentation
  • DUAL_MODE_ARCHITECTURE.md - Architecture specification

Installation

pip install device-fingerprinting-pro==2.2.0

Usage Examples

Software Mode (Graceful Fallback)

import device_fingerprinting as df

# Enable TPM if available
df.enable_tpm_fingerprinting(enabled=True)

# Generate fingerprint - uses TPM if available, falls back otherwise
fingerprint = df.generate_fingerprint(method="stable", mode="software")

TPM-Strict Mode (Mandatory)

import device_fingerprinting as df

# Enforce TPM requirement
try:
    fingerprint = df.generate_fingerprint(method="stable", mode="tpm_strict")
    # Success: TPM hardware attestation included
except RuntimeError as e:
    # TPM not available - deployment should be restricted
    print(f"TPM required but not available: {e}")

Adaptive Deployment

import device_fingerprinting as df

# Check TPM availability
status = df.get_tpm_status()

# Use strict mode if TPM available, fallback to software mode
mode = "tpm_strict" if status['tpm_hardware_available'] else "software"
fingerprint = df.generate_fingerprint(method="stable", mode=mode)

Technical Details

TPM Detection Implementation

  • Windows: PowerShell Get-Tpm | ConvertTo-Json with WMI fallback
  • macOS: system_profiler SPiBridgeDataType for T2/Apple Silicon detection
  • Linux: /sys/class/tpm/tpm0/device/description parsing

Security Features

  • Hardware-backed device identity
  • Cryptographic attestation via TPM
  • SHA-256 obfuscation of hardware IDs
  • No plaintext TPM data storage

Backward Compatibility

  • Default mode remains "software" for existing deployments
  • No breaking changes to existing API
  • TPM features are opt-in

Full Changelog

v2.2.0 (2025-12-21)

  • Added TPM/Secure Hardware fingerprinting support
  • Implemented dual-mode architecture (software/tpm_strict)
  • Cross-platform TPM detection (Windows TPM 2.0, macOS Secure Enclave, Linux TPM)
  • Hardware attestation with privacy-preserving obfuscation
  • Enhanced security for deployments requiring hardware-backed identity
  • Added comprehensive test suite for TPM functionality (7/7 tests passing)
  • Updated README with TPM sections and architectural diagrams

Links

Contributors

@Johnsonajibi

License

MIT License

Contributors

Johnsonajibi
Assets 2
Loading
0 Join discussion