trustedcomputingtpmandtruestedboot-wenkub.com
2025-03-10 17:06 本頁面
【正文】 2023年 3月 下午 5時 6分 :06March 31, 2023 1業(yè)余生活要有意義，不要越軌。 17:06:0417:06:0417:06Friday, March 31, 2023 1知人者智，自知者明。 下午 5時 6分 4秒 下午 5時 6分 17:06: 楊柳散和風(fēng)，青山澹吾慮。 2023年 3月 31日星期五 下午 5時 6分 4秒 17:06: 1楚塞三湘接，荊門九派通。 17:06:0417:06:0417:063/31/2023 5:06:04 PM 1成功就是日復(fù)一日那一點點小小努力的積累。 2023年 3月 下午 5時 6分 :06March 31, 2023 1行動出成果，工作出財富。 17:06:0417:06:0417:06Friday, March 31, 2023 1乍見翻疑夢，相悲各問年。 TXT) to perform a measured and verified launch of an OS kernel/VMM. 93 94 static chain of trust ? platform powers on / platform is reset ? reset all PCRs to their default value ? first measurement ? hardware (., the processor) to measure a digitally signed module (ACM) ? Authenticated Code Module (ACM) ? provided by the chipset manufacturer ? The processor validates the signature and integrity of the signed module before executing it 95 static chain of trust ? second measurement ? ACM then measures the first BIOS code module ? The measurements of the ACM and BIOS code modules are extended to PCR0 ? the static core root of trust measurement (CRTM) ? Third measurement ? BIOS (other firmware code) makes additional measurements 96 shortings of SRTM ? Scalability and Inclusivity ? patching and updating ? the variety of configuration ? different orders ? Time of measurement ? only gives loadtime guarantee not runtime guarantee (Launch time protection vs. runtime protection) 97 dynamic chain of trust ? OS invokes a special security instruction ? reset dynamic PCRs (PCR1722) to their default value ? first dynamic measurement ? hardware (., the processor) to measure another digitally signed module (referred to as the SINIT ACM) ? also provided by the chipset manufacturer ? the Dynamic Root of Trust Measurement (DRTM) ? PCR17 – DRTM and launch control policy 98 dynamic chain of trust ? second dynamic measurement ? SINIT ACM then measures the first operating system code module ? referred to as the measured launch environment – MLE ? PCR18 – Trusted OS startup code (MLE) ? third dynamic measurement ? MLE executes 99 dynamic PCRs ? PCR17 – DRTM and launch control policy ? PCR18 – Trusted OS startup code (MLE) ? PCR19 – Trusted OS (for example OS configuration) ? PCR20 – Trusted OS (for example OS Kernel and other code) ? PCR21 – as defined by the Trusted OS ? PCR22 – as defined by the Trusted OS 100 How TXT works 101 TXT ponents 102 TXT integrity checking ? the tboot trusted boot hypervisor ? Authenticated Code Module (ACM) ?often referred to as the SINIT AC― ? a binaryonly object ? signed by Intel 103 Launch Sequence ? MLE (tboot) ? authenticated code (AC) module ? digital signature in the header ? load into internal RAM (referred to as authenticated code execution area) isolation ? GETSEC[SENTER] ? Broadcast – cleanup – wait ? executes the AC module ? Test chipset and configurations ? measures and launches the MLE ? ILP stores MLE measurement in TPM ? MLE pletes system configuration changes ? including redirecting INITs, SMIs, interrupts, etc. ? wakes up RLPs ? bring them into the measured environment 104 MLE Architecture Overview ? Initialization ? setup the MLE on the ILP and join code to initialize the RLPs ? dispatch routine ? like the unmeasured version would have ? shutdown. ? again synchronizing the processors, clearing any state and executing the GETSEC[SEXIT] instruction 105 MLE Launch ? TXT detection and processor preparation ? Loadi
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號-1