Chris Fenner

@chrisfenner.bsky.social

25 Followers 20 Following

We were on the verge of greatness. We were this close. (Krennic in Rogue 1)
5. Before launching an EFI Driver or an EFI Boot Application (and regardless of whether the launch is due to the EFI Boot Manager picking an image from the DriverOrder or BootOrder UEFI variables or an already launched image calling the UEFI Loadlmage() function), the UEFI firmware SHALL determine if the entry in the EFI_IMAGE_SECURITY_DATABASE_GUID/EF|_ IMAGE_SECURITY_DATABASE variable that was used to validate the EFI image has previously been measured with the EV_EF_VARIABLE_AUTHORITY event type in PCR[7]. If it has not been, it MUST be measured into PCR[7] as follows. If it has been measured previously, it MUST NOT be measured again. The measurement SHALL occur in conjunction with image load.
Archon from StarCraft, one of whose quotes was “Thoughts in Chaos” and for some reason I can remember that today but not what I was doing yesterday
Jayne: “You know what the chain of trust is? It's the chain I go get and beat you with 'til ya understand who's trustin' who here.”