Re: Early microcode signing in secure boot environment - Was: x86,microcode: Use common get_ramdisk_image()

[H. Peter Anvin]

On 04/11/2013 01:59 AM, Thomas Renninger wrote:
> 
>>> Is this "cryptographically authenticated by the CPU itself" thing
>>> documented
>>> somewhere so that security people can double check that it is really
>>> secure?
>>
>> X86 SDM defines that the second part of microcode update is the encrypted
>> data.
> 
> Again, I doubt it is allowed to bypass UEFI authentication with arbitrary, 
> vendor specific authentication checks.
> 

What does that even mean in this context?

	-hpa


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/