4 ms·
http://www.coreboot.org/pipermail/coreboot/2015-February/079208.html http://www.coreboot.org/pipermail/coreboot/2015-February/079... >This means the OEM are fu
by aortega 12y ago
http://www.coreboot.org/pipermail/coreboot/2015-February/079208.html http://www.coreboot.org/pipermail/coreboot/2015-February/079...
>This means the OEM are fusing SHA256 public key
hashes into the southbridge.
SHA256 public keys, scary indeed.
- Buge 12y agoSHA256 public key hashes
- aortega 12y agoMaybe they meant "HMAC" or "Fingerprint".
- Dylan16807 12y agoYou don't need an HMAC to verify a key or other blob of data, and isn't fingerprint a less technical term for hash?
- geofft 12y ago"Hash" is a perfectly valid term, although "fingerprint" would also be correct. "HMAC" is something else entirely.
- pgeorgi 12y agoIntel likes to use SHA256(pubkey) for their verification schemes. I guess that reduces the amount of storage while sufficiently secure. Details are in http://apress.com/9781430265719 http://apress.com/9781430265719