6 ms·
If one can measure the whole boot process and verify the attestation "remotely", why would he need secureboot on top of that?
by exxo_ 5y ago
If one can measure the whole boot process and verify the attestation "remotely", why would he need secureboot on top of that?
- viraptor 5y agoYou need secureboot to be able to ensure that the boot process is the one you set up. Otherwise the attacker can observe it once and replace it with their own version doing whatever they want and saying "yup, here's your magic number, I totally generated in a legit way not read from a saved store".