Authenticated Boot and Disk Encryption on Linux

Re:Authenticated Boot and Disk Encryption on Linux by Foxboron on Thursday September 23, 2021 @07:19AM (#28627686)

I don't think a 5 year old project linked without context is appropriate when talking about modern boot chain security.

It doesn't even support stubs so it fails at the first threat scenario described in this post.

[ Parent | on HN ]

Re:Authenticated Boot and Disk Encryption on Linux by selfhoster11 on Thursday September 23, 2021 @10:37AM (#28629769)

I disagree. UEFI boot security is not that recent, and it hasn't changed so much as to render earliest approaches less secure.

[ Parent | on HN ]

Re:Authenticated Boot and Disk Encryption on Linux by Foxboron on Thursday September 23, 2021 @10:42AM (#28629838)

It is less secure. The initramfs is not signed, along with the microcode.

[ Parent | on HN ]