Re: Early microcode signing in secure boot environment - Was: x86,microcode: Use common get_ramdisk_image()

From: H. Peter Anvin
Date: Thu Apr 11 2013 - 18:53:24 EST


On 04/11/2013 01:59 AM, Thomas Renninger wrote:
>
>>> Is this "cryptographically authenticated by the CPU itself" thing
>>> documented
>>> somewhere so that security people can double check that it is really
>>> secure?
>>
>> X86 SDM defines that the second part of microcode update is the encrypted
>> data.
>
> Again, I doubt it is allowed to bypass UEFI authentication with arbitrary,
> vendor specific authentication checks.
>

What does that even mean in this context?

-hpa


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/