3 ms·
Can you talk a little more about your setup? How does it ensure your coreboot is not tampered with?
by jmholla 4y ago
Can you talk a little more about your setup? How does it ensure your coreboot is not tampered with?
- fsflover 4y agoIt relies on Heads (https://github.com/osresearch/heads https://github.com/osresearch/heads), tamper-evident boot software that loads from within coreboot and uses the TPM chip and the user’s own GPG keys to detect tampering within the BIOS. Here are some explanations: https://puri.sm/posts/pureboot-101-first-boot-first-update-and-detecting-software-tampering/ https://puri.sm/posts/pureboot-101-first-boot-first-update-a..., https://docs.puri.sm/Librem_Key/Getting_Started/User_Manual.html https://docs.puri.sm/Librem_Key/Getting_Started/User_Manual....
- jmholla 4y agoThank you so much! I'll check these out.