topic Re: question about Intel TXT ac module integrity in Software Archive

question about Intel TXT ac module integrity

marten_gajda — Fri, 27 Mar 2009 16:53:30 GMT

I've a question regarding the authentication of the ac module.
I understand that the header of the ac module features the rsa public
key to verify the signature provided in the module header.
My question is: How is the rsa pulic key verified?
The Trusted Execution Technology - Developer's Guide mentions that the
hash of the public key is computed and compared. Compared to what?
Is this hash stored somewhere in the chipset or the cpu? Is it possible
to update this hash in case the key pair gets compromised?
Thank you.

regards

Marten Gajda

Re: question about Intel TXT ac module integrity

David_O_Intel1 — Mon, 30 Mar 2009 17:48:05 GMT

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

Re: question about Intel TXT ac module integrity

marten_gajda — Tue, 31 Mar 2009 22:32:15 GMT

Quoting - David Ott (Intel)

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

thank you, I think this information will do.

Marten