On: Plausibly deniable encryption (2020)

[josephcsible]

That attack isn't relevant in this case, because it only lets you steal the keys if the TPM chooses to release them to the CPU, but if you don't know the right PIN, or use a nuke PIN, then it won't do so.