Which of the following provides dedicated hardware-based cryptographic functions to an operating system and its applications running on laptops and desktops?

The TPM is a secure cryptoprocessor chip defined by the Trusted Computing Group that is embedded directly on a system's motherboard. It provides hardware-isolated key generation and storage, encryption operations, and platform attestation without relying solely on software. BitLocker and other OS-level encryption solutions leverage the TPM to bind encryption keys to the specific hardware, preventing keys from being extracted if the drive is moved to another machine.

An HSM (Hardware Security Module) is typically a high-performance, external or rack-mounted device used by servers and enterprises for high-volume cryptographic operations and certificate authority functions - it is not the embedded solution designed for individual laptops and desktops.

A CPU (Central Processing Unit) is a general-purpose processor that can execute cryptographic instructions via extensions like AES-NI, but it is not a dedicated security module and does not provide the hardware-isolated key storage and platform integrity features of a TPM.

An FPU (Floating Point Unit) is a component that handles floating-point arithmetic operations and has no cryptographic or security functions.