News for hackers. Stuff that matters.
Re:Installing Windows 11 on Legacy BIOS Without Secure Boot by mjg59 on Saturday June 26, 2021 @08:20PM (#27647279)
No. Every TPM has a factory-supplied unique key called the endorsement key, but every other key on the TPM is randomly generated on the TPM. The keys you actively use /can/ be tied back to the endorsement key, but there's no need for them to be - for most cases, any cryptographic material you generate on the TPM will be indistinguishable from material you generate on the CPU, other than to the local client.

There are no comments on this comment yet.