igor_sk

3 ms·

1. 1.▲
   by igor_sk 5y ago

   It's https://gist.github.com/dougallj/7a75a3be1ec69ca550e7c36dc75...
2. 2.▲
   by igor_sk 8y ago

   properly implemented, hw encryption is better because it does not expose key material in the RAM even for a brief moment.
3. 3.▲
   by igor_sk 10y ago

   The paper is nice, however it covers an ancient AMT version. AFAIK this won't work on recent versions (it has saner defaults).
4. 4.▲
   by igor_sk 10y ago

   >It includes in it the ME blob No, it does not. FSP only includes x86 code to be executed on the main CPU. It may include stuff which talks to the ME but no ME firmware itself. You can use any UEFI extractor like UEFITool to check that.