lkml.org 
[lkml]   [2009]   [Jun]   [24]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [RFC v5][PATCH 0b/4] intel_txt: Intel(R) Trusted Execution Technology support for Linux - Details
Dave Jones wrote:
> On Mon, Jun 22, 2009 at 05:41:26PM -0700, Joseph Cihula wrote:
>
> > The Q35_SINIT_17.BIN file is what Intel TXT refers to as an
> > Authenticated Code Module. It is specific to the chipset in the system
> > and can also be found on the Trusted Boot site. It is a firmware module
> > digitally signed by Intel that is used as part of the DRTM process to
> > verify and configure the system.
>
> This seems a little disingenious. Firmware isn't typically loaded by grub
> into main memory and executed by the host processor.
>
> so, is this all worthless without the binary blob ?
>
> "trust us, it's signed by intel" doesn't make me feel more secure.

how's that different from your normal bios ?


\
 
 \ /
  Last update: 2009-06-24 22:41    [W:0.086 / U:0.480 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site