question about Intel TXT ac module integrity

question about Intel TXT ac module integrity

I've a question regarding the authentication of the ac module.
I understand that the header of the ac module features the rsa public
key to verify the signature provided in the module header.
My question is: How is the rsa pulic key verified?
The Trusted Execution Technology - Developer's Guide mentions that the
hash of the public key is computed and compared. Compared to what?
Is this hash stored somewhere in the chipset or the cpu? Is it possible
to update this hash in case the key pair gets compromised?
Thank you.

regards

Marten Gajda
3 posts / 0 new
Last post
For more complete information about compiler optimizations, see our Optimization Notice.

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

Quoting - David Ott (Intel)

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

thank you, I think this information will do.

Marten

Leave a Comment

Please sign in to add a comment. Not a member? Join today