Security Threats Addressed

Security Threat Scenario	TPM Key	Controller Key	Controller Key Rotation	Key from TPM + Controller	TPM + Controller Key with Attestation	TPM + Controller Key Rotation with Attestation
Storage drive is taken out and inserted into another system/PC to read the data from the SSD directly using offline crypto tools	Protected	Protected	Protected	Protected	Protected	Protected
Storage drive is taken out and inserted into another system/PC to read the data, by spoofing the Device Identity and talking to Controller	Protected	Not Protected	Not Protected	Protected	Protected	Protected
EVE device is taken out, and booted up in another location to access its data, but the theft has been detected	Not Protected	Protected	Protected	Protected	Protected	Protected
EVE device is taken out, and booted up in another location to access its data, but no knowledge of it being stolen	Not Protected	Not Protected	Protected	Not Protected	Protected (Using Geo Fencing)	Protected( Using Geo Fencing)
EVE device is not taken out, but some other malware is loaded on the system, and is used to get access from remote to access the information	Not Protected	Not Protected	Not Protected	Not Protected	Protected (PCR value change detection)	Protected(

Given that malware is detected by PCR values)

PCR Value change detection)
Brute force attack for Key identification	Not Protected	Not Protected	Protected	Not Protected	Not Protected	Protected

References

...