News for hackers. Stuff that matters.

A comment on Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security. Parent comment

Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by tredre3 on Saturday May 06, 2023 @04:51PM (#35845255)
This has nothing to do with TFA, you're thinking of the TPM2.0 which is unrelated to secure boot.

Secure Boot is part of UEFI. TPM2.0 is used only by bitlocker (at least for the average person, enterprises do store other keys in it).

[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by mixmastamyk on Saturday May 06, 2023 @07:47PM (#35846471)
Oh, should I disable TPM2?
[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by SturgeonsLaw on Saturday May 06, 2023 @10:17PM (#35847271)
The TPM2 spec allows it to do much more than just hold private keys, it can act as a device identifier for attestation. If that's something you care about, then you might want to disable it.

The fact that Windows 11 won't work without a TPM is a bonus.

[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by mixmastamyk on Sunday May 07, 2023 @03:51PM (#35854988)
Guess I'm only worried about it being used against me. Don't know enough about any threats it might enable.
[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by Hawxy on Saturday May 06, 2023 @10:25PM (#35847307)
> TPM2.0 is used only by bitlocker

This isn't true at all, Windows Hello uses it as a secure credentials store.

[ Parent | on HN ]
Re:Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Se... by Dalewyn on Saturday May 06, 2023 @10:30PM (#35847332)
Windows 11's system requirements include both SecureBoot and TPM2, so yes it is in fact relevant.
[ Parent | on HN ]