But surely it will if one of the keys is compromised. And then it becomes a race between the malware author and OS update provider to see who can hit the KEK database first.
Power management, mobile and firmware developer on Linux. Security developer at nvidia. Ex-biologist. Content here should not be interpreted as the opinion of my employer. Also on Mastodon and Bluesky.
Re: So the OS can modify the keys?
Date: 2011-10-20 06:20 pm (UTC)