Collaborate Disseminate
I read about TPM2 with PCR locking full-disk encryption from different sources. For example [1]. What I can’t understand is how much does this protect from full server theft.
If we assume that TPM2 module is secure (attacker can’t read it)… Continue reading Can TPM2 disk encryption protect data after full server theft?
I read about TPM2 with PCR locking full-disk encryption from different sources. For example [1]. What I can’t understand is how much does this protect from full server theft.
If we assume that TPM2 module is secure (attacker can’t read it)… Continue reading Can TPM2 disk encryption protect data after full server theft?
I was wondering if there are any advantages/disadvantages of using Bitlocker/TPM vs. using Veracrypt/TPM as far as vulnerabilities go?
In order to use FDE in Bitlocker, you have to have a Microsoft account, correct? So would it be safe to… Continue reading Differences/vulnerabilities in FDE and TPM using Bitlocker vs Veracrypt? [closed]
Definitions
Grub is the second stage bootloader often found in Linux distributions.
shim is the first bootloader ran by the ROM firmware. It is signed by Microsoft.
ROM firmware is the code embedded in the hardware which implements the UEF… Continue reading Is grub implementation of secure boot inherently flawed?
If the ISO file for an operating system is malicious, is it possible for it to overwrite UEFI code when booted (If secure boot is disabled)?
About secure boot, I’ve visited intel’s website and they said:
The feature defines an entirely new interface between operating system and firmware/BIOS. When enabled and fully configured, Secure Boot helps a computer resist attacks and in… Continue reading Does secure boot protect you from infected BIOS/firmware?
Since Secure Boot authenticates software, the OS only needs to check hardware. The implementation I have in mind measures hardware and compares the result of the measurement to the value in an EFI NVRAM variable. If they differ, the OS hal… Continue reading Can an OS implement Trusted Boot without TPM given Secure Boot?
First some definitions and common understanding.
The premise of secure boot is that each binary get’s verified before
it is loaded. This starts with the firmware in ROM verifying the EFI
application.
For the case of a Linux boot that EFI … Continue reading How to prevent grub.cfg from breaking the chain of trust?
First some definitions and common understanding.
The premise of secure boot is that each binary get’s verified before
it is loaded. This starts with the firmware in ROM verifying the EFI
application.
For the case of a Linux boot that EFI … Continue reading How to prevent grub.cfg from breaking the chain of trust?
How is it possible that Kon Boot tool bypasses Windows’ SecureBoot?
How does it work?