3 ms·
"Yes: the Intel TPM / Secure Boot system's design goal is to stop rootkits" Why would you need any cryptography to do this? I have a computer that uses a much
by betterunix 13y ago
"Yes: the Intel TPM / Secure Boot system's design goal is to stop rootkits"
Why would you need any cryptography to do this? I have a computer that uses a much simpler, equally effective, and easier-to-use approach: the boot sector cannot be overwritten unless the system is rebooted in a special mode (and the OS cannot be booted in that mode). At least for personal computing, that is far better than a system that forces people to rely on a trusted third party to decide what software they can run.
- tptacek 13y agoTZ is not cryptographic. You should go read about it. It's an interesting design approach.
- betterunix 13y agoThe TPM and "secure boot," which you brought up, are cryptographic. That is what I was replying to, sorry if that was not clear enough.