Roots of Trust and Attestation
summary
Explains why verified boot halts CPU as a blunt policy and how that creates indistinguishable failures and costly recovery, shows concrete hardware problems like a server board with a serial console dropping an unauthenticated BMC root shell and test points that expose debug interfaces, and demonstrates practical mitigations: publishing schematics (Open Compute Project), using coreboot + openBMC to create an auditable chain of trust, leveraging TPM/SGX attestation and sealed secrets for rollback protection and recoverable, user-controlled update flows.
AI-written summary · about
chapters (13)
- 0:00Intro
- 2:40Firmware
- 5:50Troubleshooting
- 10:22Recovery
- 14:13BMC
- 15:15Remote attestation
- 18:29Early boot attestation
- 23:06AMD SCV
- 24:01SGX
- 24:40Cloud Providers
- 26:41Firmware in Servers
- 27:37NIST Guidelines
- 28:53Spy Spy
related talks
39mSecuring firmware: Secure and Trusted boot in OpenBMC
19mBoF: Simple Remote Attestation with Secure & Attested Communication Channels
59mLayered Attestation of a Cross-Domain System
42mPractical Application of Verified Boot
49mKeylime: Bootstrapping and Maintaining Trust
49mSecure Boot from A to Z
10mRoot-of-trust - What it is and why you need one in IoT
18mBeyond the Default Password: Building Trustworthy IoT Products