3 ms·
If I’m reading this correctly, it means the private key of a certificate is leaked during generation. Boot chains rely on the verification of certificates and s
by vermilingua 7y ago
If I’m reading this correctly, it means the private key of a certificate is leaked during generation. Boot chains rely on the verification of certificates and signed data, not signing. So no.
- baroffoos 7y agoSo this lets you grab the key on your own device which is used to encrypt the storage but not the OEM key used to sign the firmware image?
- dlgeek 7y agoAlmost. s/encrypt the storage/sign the remote attestation document/. Storage would be encrypted with a symmetric AES key, this only leaks asymmetric ECDSA signing keys