News for hackers. Stuff that matters.
Re:TPM–Fail: TPM Meets Timing and Lattice Attacks by dlgeek on Wednesday November 13, 2019 @01:28AM (#21521614)
No. There are two different things, Secure Boot (which prevents the device from running unsigned software) and Trusted Boot (where the device can run anything but can prove to a remote party that it's running a specific software).

Because this would only leak private keys inside the device, you can only attack Trusted Boot (where producing trusted signatures is important), not Secure Boot (which only verifies signatures that were produced elsewhere).

There are no comments on this comment yet.