News for hackers. Stuff that matters.

A comment on Coreboot Blocked from Recent Thinkpads by Intel Boot Guard. Parent comment

Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by aortega on Monday March 02, 2015 @10:35PM (#9135961)
http://www.coreboot.org/pipermail/coreboot/2015-February/079...

>This means the OEM are fusing SHA256 public key hashes into the southbridge.

SHA256 public keys, scary indeed.

[ Parent | on HN ]
Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by Buge on Monday March 02, 2015 @11:27PM (#9136102)
SHA256 public key hashes
[ Parent | on HN ]
Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by aortega on Monday March 02, 2015 @11:44PM (#9136151)
Maybe they meant "HMAC" or "Fingerprint".
[ Parent | on HN ]
Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by pgeorgi on Tuesday March 03, 2015 @09:08AM (#9137659)
Intel likes to use SHA256(pubkey) for their verification schemes. I guess that reduces the amount of storage while sufficiently secure.

Details are in http://apress.com/9781430265719

[ Parent | on HN ]
Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by geofft on Tuesday March 03, 2015 @02:34AM (#9136527)
"Hash" is a perfectly valid term, although "fingerprint" would also be correct. "HMAC" is something else entirely.
[ Parent | on HN ]
Re:Coreboot Blocked from Recent Thinkpads by Intel Boot Guard by Dylan16807 on Tuesday March 03, 2015 @01:04AM (#9136337)
You don't need an HMAC to verify a key or other blob of data, and isn't fingerprint a less technical term for hash?
[ Parent | on HN ]