News for hackers. Stuff that matters.

A comment on BeagleV-Ahead open-source RISC-V single board computer. Parent comment

Re:BeagleV-Ahead open-source RISC-V single board computer by megous on Sunday October 15, 2023 @05:40PM (#37893631)
That doesn't make much sense. You don't need any private material to verify signatures when using asymmetric cryptography. How's TPM useful at all if all it does is verify signatures?
[ Parent | on HN ]
Re:BeagleV-Ahead open-source RISC-V single board computer by samus on Monday October 16, 2023 @12:52AM (#37896036)
The TPM had multiple functions, and for verifying operating system images indeed no private key is required. For that to work, it is merely required that the OS doesn't have write access to the TPM.

Private key material is required for remote attestation, which makes it possible to prove certain things to an external party, for example the exact identity of the TPM. This feature is much more questionable.

[ Parent | on HN ]