Firmware security

Oct 29 · 33 min read

What discrete and firmware TPMs are, how they keep keys, record the boot in PCRs, and prove a machine's state to a remote verifier through credential activation and quotes.

• TPM 2.0
• Attestation
• Measured boot
• Hardware security
• Firmware security

Oct 24 · 43 min read

Tracing EDK II's TPM 2.0 initialization, PCR usage, measured byte streams, crypto-agile event logs, replay and the firmware-to-OS handoff.

• UEFI
• TPM 2.0
• EDK II
• Measured boot
• Firmware security