4 ms·
If they are hooking the full Windows boot chain, it's only a small step to also hook the encryption/decryption process during the boot.
by rjaco31 12y ago
If they are hooking the full Windows boot chain, it's only a small step to also hook the encryption/decryption process during the boot.
- MichaelGG 12y agoHence the part of the TPM and other DRM-capable technologies (Secure Boot, I think). You can sign and seal the boot code, so just owning the firmware doesn't get you there. (Of course the NSA might also compromise the Windows boot keys, but then that's a detectable, major incident.)