Re:Authenticated Boot and Disk Encryption on Linux
by mjg59 on Thursday September 23, 2021 @03:02PM
(#28633660)
> there's really no recourse for it in the spec
There's not only a recourse for it, modern firmware implements it. You just use the IOMMU to restrict Thunderbolt devices to being able to access their own buffers.
There's not only a recourse for it, modern firmware implements it. You just use the IOMMU to restrict Thunderbolt devices to being able to access their own buffers.