lkml.org 
[lkml]   [2013]   [Mar]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] x86/efi: pull NV+BS variables out before we exit boot services
On Wed, Mar 20, 2013 at 08:00:03AM +0000, James Bottomley wrote:

> I agree with this. But I do think the volatile secret key scheme, where
> you discard the key immediately after use is the more secure one because
> it relies on fewer secrets (and, indeed, no secrets at all after the
> event). It's a case where transparency encourages better security
> architecture.

That somewhat depends what you're securing against. There's an argument
that reusing this key is actually sufficiently secure so long as the
only way to obtain it is with physical access to the machine - that way
you don't have an nvram update cycle every boot. Exposing these
variables to userspace doesn't make it impossible to produce a secure
system, but it does remove some choices that were previously available.

--
Matthew Garrett | mjg59@srcf.ucam.org


\
 
 \ /
  Last update: 2013-03-20 13:21    [W:0.050 / U:0.472 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site