3 ms·
Wouldn’t it make more sense to blow the motherboard rather than the CPU? A compromised CPU without anything connected is pretty useless at boot. The motherboard
by 3np 6y ago
Wouldn’t it make more sense to blow the motherboard rather than the CPU? A compromised CPU without anything connected is pretty useless at boot. The motherboard is what’s connected to all the good stuff.
- 0zymandiass 6y agoThe CPU isn't what's compromised - this is protecting against a compromised motherboard
- soneil 6y agoI think that’s the chicken & egg. If the motherboard was responsible for this, you’re trusting the firmware to validate itself. So this moves the validation a level lower. It’s an interesting problem. The solution is valid, but it’s unfortunately permanent.
- im3w1l 6y agoYou could have a small rom firmware validating a larger ugradable firmware.
- bayindirh 6y agoHowever, the root of trust is embedded to the CPU. So, you can't hammer the CPU on another board for keys. Also, we sometimes lose the CPU rather than the board. As the CPUs become more complex, their probability to fail has risen.
- 3np 6y ago> However, the root of trust is embedded to the CPU. So, you can't hammer the CPU on another board for keys. I guess that's the key point here.