Messages in this thread | | | Date | Wed, 24 Jun 2009 13:37:49 -0700 | From | Arjan van de Ven <> | Subject | Re: [RFC v5][PATCH 0b/4] intel_txt: Intel(R) Trusted Execution Technology support for Linux - Details |
| |
Dave Jones wrote: > On Mon, Jun 22, 2009 at 05:41:26PM -0700, Joseph Cihula wrote: > > > The Q35_SINIT_17.BIN file is what Intel TXT refers to as an > > Authenticated Code Module. It is specific to the chipset in the system > > and can also be found on the Trusted Boot site. It is a firmware module > > digitally signed by Intel that is used as part of the DRTM process to > > verify and configure the system. > > This seems a little disingenious. Firmware isn't typically loaded by grub > into main memory and executed by the host processor. > > so, is this all worthless without the binary blob ? > > "trust us, it's signed by intel" doesn't make me feel more secure.
how's that different from your normal bios ?
| |