Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> But the article also says you can replace that public key, also they are from the motherboard, not CPU manufacturer.

No. The article does state that EKs come from your fTPM, which is part of your CPU package.

Without replacing your CPU, you are not replacing your EK, or `EKpub`.

Unless you install a discrete TPM, who's `EKpub` won't be signed by Intel or AMD; thus easily detectable as a discrete TPM.



dTPM means it removable on motherboard. fTPM means it's in the CPU or some chip soldered to the motherboard?

They cannot distinguish between the dTPM and the one that is soldered? Because the one soldered is signed by the motherboard manufacturer.

If they only allow CPU signed TPM they are scrapping millions of perfectly fine machines.

RIP Microsoft and all AAA gamedevs.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: