News for hackers. Stuff that matters.

A comment on Titan in depth: Security in plaintext. Parent comment

Re:Titan in depth: Security in plaintext by sannee on Friday August 25, 2017 @07:03AM (#15097564)
> Once Titan has booted its own firmware in a secure fashion, it will turn its attention to the host’s boot firmware flash, and verify its contents using public key cryptography. Titan can gate PCH/BMC access to the boot firmware flash until after it has verified the flash content, at which point it signals readiness to release the rest of the machine from reset

Can I serve a different firmware image after the verification goes through and the PCH starts loading the flash? :)

[ Parent | on HN ]
Re:Titan in depth: Security in plaintext by bluegate010 on Friday August 25, 2017 @01:28PM (#15100423)
If the flash chip holding the boot firmware isn't really a flash chip, then indeed this could present an issue. However, since Titan interposes between flash and the PCH/BMC, it can observe the bytes actually being served.
[ Parent | on HN ]