You won't need new keys in that scenario. The binaries are signed with a key that's chained back to the trusted key. If the signing key somehow leaks (and really that is not a terribly likely thing to happen) then that key can be invalidated and a new signing key produced that chains back to the same trusted key. Binaries signed with the new key will continue to be trusted by existing firmware.
Power management, mobile and firmware developer on Linux. Security developer at Aurora. Ex-biologist. mjg59 on Twitter. Content here should not be interpreted as the opinion of my employer. Also on Mastodon.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
Re: What happens if Microsoft's keys are stolen?
Date: 2012-06-08 11:36 am (UTC)