Dasharo TrustRoot Ephemeral Key Incident

Posted by pietrushnic on Monday December 22, 2025 @09:04AM
from the blog.3mdeb.com dept.

https://blog.3mdeb.com/2025/2025-12-18-eom-key-issue/

( 4 comments | 2 points | on HN )

Re:Dasharo TrustRoot Ephemeral Key Incident by pietrushnic on Monday December 22, 2025 @09:04AM (#46354193)

This report details a release engineering incident where a Dasharo firmware update successfully performed End-of-Manufacturing (EOM) fusing on NovaCustom laptops but utilized an ephemeral testing key instead of the persistent production key. We provide a technical analysis of the situation and outline impact for affected end users.

[ Parent | on HN ]

Re:Dasharo TrustRoot Ephemeral Key Incident by croemer on Thursday December 25, 2025 @06:55PM (#46387869)

What is Dasharo and NovaCustom?

[ Parent | on HN ]

Re:Dasharo TrustRoot Ephemeral Key Incident by chews on Thursday December 25, 2025 @09:09PM (#46388577)

NovaCustom is the EU version of a https://puri.sm laptop. it's got an open boot loader and a TPM for supporting OS's that require it like Windows 11.

[ Parent | on HN ]

Re:Dasharo TrustRoot Ephemeral Key Incident by 1vuio0pswjnm7 on Thursday December 25, 2025 @11:32PM (#46389253)

Dasharo is pre-installed coreboot

[ Parent | on HN ]