News for hackers. Stuff that matters.

A comment on Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security. Parent comment

Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by pmontra on Saturday May 06, 2023 @03:31PM (#35844629)
People know keys, people eventually leak keys. It always happened.
[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by mynameisvlad on Saturday May 06, 2023 @04:18PM (#35845018)
The point is that you can't leak a key from a HSM.
[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by josefx on Saturday May 06, 2023 @08:20PM (#35846627)
On the one hand that is the goal, on the other hand the applicable standard seems to be FIPS 140, which counts products with a flawless security history like OpenSSL amongst its long time adherents. In other words there is a non zero chance that the modules will just spit out the key if you even look at them funny.
[ Parent | on HN ]