AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a Cost

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by tyingq on Tuesday September 08, 2020 @10:34PM (#24416281)

Is there any guarantee each vendor will only ever use one signing key? Or might we have problems swapping from one Dell to another Dell, for example?

[ Parent | on HN ]

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by necovek on Thursday September 10, 2020 @02:59AM (#24429654)

I would imagine they'd have to use new ones every once in a while.

What I am most worried about is vendor's key becoming compromised (whether cracked or stolen), which means that a revocation mechanism is missing.

Even with revocation implemented, such equipment would be rendered useless (I imagine vendor would have to cover for replacements).

[ Parent | on HN ]

Re:AMD PSB Vendor Locks EPYC CPUs for Enhanced Security at a... by Patrick-STH on Tuesday September 08, 2020 @10:51PM (#24416431)

Discussed later in the video. But this is possible which adds another layer of complexity if one tries to track pulls.

[ Parent | on HN ]