Block Integrated Trust (BIT)
BIT is TCG's component-level hardware Root of Trust for constrained devices. It provides TPM-like identity, measurement storage, and measurement reporting allowing integrated components to attest to their health and trustworthiness.
What BIT delivers
Anchors trust directly in the component, with a footprint small enough for constrained silicon.
Each component carries its own cryptographic identity, distinguishable from every other unit.
Integrity measurements are recorded inside the component and protected from modification.
The component can report its recorded measurements so an external party can evaluate them.
Embedded components can prove their health and configuration to a verifier.
Brings hardware-anchored trust to devices with limited silicon, power, and memory budgets.
The same model applies across a wide range of component-scale products.
Published libraries and APIs define how implementers integrate and use BIT consistently.
Anchors trust directly in the component, with a footprint small enough for constrained silicon.
Each component carries its own cryptographic identity, distinguishable from every other unit.
Integrity measurements are recorded inside the component and protected from modification.
The component can report its recorded measurements so an external party can evaluate them.
Embedded components can prove their health and configuration to a verifier.
Brings hardware-anchored trust to devices with limited silicon, power, and memory budgets.
The same model applies across a wide range of component-scale products.
Published libraries and APIs define how implementers integrate and use BIT consistently.
Key capabilities of the BIT specification
Isolated lightweight hardware RoT model
Basic identity, measurement storage, and reporting primitives
Ideal for constrained devices with limited silicon and power budgets
Attestation-friendly measurement reporting
Complementary positioning with DICE and TPM
Fit for component-scale and embedded-device trust
Isolated lightweight hardware RoT model
A self-contained Root of Trust that operates independently within the component.
Basic identity, measurement storage, and reporting primitives
A minimal set of functions covering the essentials of component-level trust.
Ideal for constrained devices with limited silicon and power budgets
Designed for products where a discrete TPM would be too costly or too large.
Attestation-friendly measurement reporting
Measurements are reported in a form that fits TCG attestation workflows.
Complementary positioning with DICE and TPM
Sits alongside DICE and TPM rather than replacing them, covering the component scale.
Fit for component-scale and embedded-device trust
Targets individual components inside larger systems, not the platform as a whole.
Related TCG Work Groups that leverage BIT
Block Integrated Trust (BIT)
Develops BIT specifications, APIs, serialization, use cases, and implementation guidance.
Attestation
Aligns attestation concepts with TCG-wide attestation terminology and guidance.
Internet of Things (IoT)
Can use BIT for security in constrained IoT devices.
Vehicle Services
Can use BIT for embedded controllers and automotive subsystems.
Cyber Resilient Technologies (CyRes)
Can use BIT as a small-device Root of Trust for protection, detection, and recovery scenarios.
Mobile and Network Equipment Work Groups can use BIT where embedded Roots of Trust are needed in constrained components.
Explore the BIT documentation
Block Integrated Trust (BIT)
The Block Integrated Trust (BIT) specification provides security no matter the size or budget of an IoT device.
View moreMeasurement and Attestation Roots Serialization Interface Specification (Specification)
Defines the serialization interface used to expose measurement and attestation roots.
View moreTCG MARS API Specification
Defines the API through which components expose identity, measurement, and reporting functions.
View moreExplore the BIT documentation
Explore other Technologies
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
TCG's cyber-resilience technology for protecting persistent code, detecting unexpected states and recovering platforms to a known trusted state.
Explore other Technologies
Trusted Platform Module (TPM)
TCG's standardized hardware Root of Trust for protecting keys, recording platform measurements and supporting attestation across every class of device.
Storage Security
TCG's architecture for interoperable security on trusted storage devices: self-encrypting drives, access control, locking and Opal, Ruby and Opalite classes.
Cyber Resilient Technologies (CyRes)
TCG's cyber-resilience technology for protecting persistent code, detecting unexpected states and recovering platforms to a known trusted state.
Become part of TCG
Membership is open to corporations, start‑ups, government, academia, and non‑profits. Join to influence specs in Work Groups, access drafts, network with experts, and submit products for TCG Certification.