3 ms·

So who knows that key? The processor? Or the operating system? What’s preventing an attacker from changing that key? Or is this just to change the attack from

So who knows that key? The processor? Or the operating system? What’s preventing an attacker from changing that key? Or is this just to change the attack from passive to active?

cryptonector 5y ago
The public key has to be known by the BMC, BIOS, OS. You can read the public key from the TPM. If you're using the endorsement key, it comes with a certificate issued by the vendor.