question about Intel TXT ac module integrity

[marten_gajda]

I've a question regarding the authentication of the ac module.
I understand that the header of the ac module features the rsa public
key to verify the signature provided in the module header.
My question is: How is the rsa pulic key verified?
The Trusted Execution Technology - Developer's Guide mentions that the
hash of the public key is computed and compared. Compared to what?
Is this hash stored somewhere in the chipset or the cpu? Is it possible
to update this hash in case the key pair gets compromised?
Thank you.

regards

Marten Gajda

[David_O_Intel1]

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

[marten_gajda]

Quoting - David Ott (Intel)

An engineer who works on thistold me that thehash of the public key is stored in a TXT configuration register (which is provided by the chipset).

David

thank you, I think this information will do.

Marten