Post #1496959
2026-02-27 16:09 UTC
…space is very scarce too). This opens things up so that we can start measuring more resources. There's one type of resource that is probably the most important one to measure on a modern image-based OSes: the images the OS is composed of, as they are activated.
With v260 we are filling this gap, finally, using a new NvPCR defined for this purpose. Whenever a DDI is activated, we'll ensure the root hash and information about the used signing keys for it are measured. This means the…
Replies (1)
-
@pid_eins@mastodon.social 2026-02-27 16:10
… TPM event log becomes a cryptographically protected log of every image the OS is composed of. Yay! (Note: this measurement is done in userspace for now, we hope this can be done from kernel space eventually, and we made sure the measurement is done in a way we can eventually move this.)