too many interfaces for applications to control keys / entropy imo. risky considering attacks against previous low level interfaces. i'd prefer to see less cont

too many interfaces for applications to control keys / entropy imo. risky considering attacks against previous low level interfaces. i'd prefer to see less control by/from applications. it's even stated in the spec there's a lot for the programmer to consider and implement to make it really secure. probarbly itl or "that bald guy who breaks all low level things" (forget his name, sorry guy!) will show how to subvert / break this when it gets implemented more widely. in my eyes: a root mode hypervisor can break al lthe things for it's guests (nothing new, but no added benefit for that.) pconfig command might be used to influence system if BIOS is compromised early on. SOC vulnerabilities will break this for sure. (and they seem common enough glares at ME). Ofcourse, can't complain that they try to add these kinds of layer. change has to start somewhere! :-)