From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with archive (Exim 4.43) id 1LazNa-0002sJ-Ko for mharc-grub-devel@gnu.org; Sat, 21 Feb 2009 16:27:22 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1LazNY-0002r2-Ak for grub-devel@gnu.org; Sat, 21 Feb 2009 16:27:20 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1LazNW-0002q7-Ah for grub-devel@gnu.org; Sat, 21 Feb 2009 16:27:19 -0500 Received: from [199.232.76.173] (port=41439 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1LazNW-0002q0-3P for grub-devel@gnu.org; Sat, 21 Feb 2009 16:27:18 -0500 Received: from aybabtu.com ([69.60.117.155]:56332) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1LazNV-0005wj-QA for grub-devel@gnu.org; Sat, 21 Feb 2009 16:27:17 -0500 Received: from [192.168.10.10] (helo=thorin) by aybabtu.com with esmtp (Exim 4.69) (envelope-from ) id 1LazGw-0000Mr-8Y for grub-devel@gnu.org; Sat, 21 Feb 2009 22:20:30 +0100 Received: from rmh by thorin with local (Exim 4.69) (envelope-from ) id 1LazNR-0004yz-0R for grub-devel@gnu.org; Sat, 21 Feb 2009 22:27:13 +0100 Date: Sat, 21 Feb 2009 22:27:13 +0100 From: Robert Millan To: The development of GRUB 2 Message-ID: <20090221212712.GA19131@thorin> References: <200902200945.51426.michael@gorven.za.net> <20090221135142.GK16068@thorin> <200902211729.52450.michael@gorven.za.net> <20090221203136.GF18492@thorin> <49A06C56.1040008@student.ethz.ch> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <49A06C56.1040008@student.ethz.ch> Organization: free as in freedom X-Message-Flag: Worried about Outlook viruses? Switch to Thunderbird! www.mozilla.com/thunderbird X-Debbugs-No-Ack: true User-Agent: Mutt/1.5.18 (2008-05-17) X-detected-operating-system: by monty-python.gnu.org: Genre and OS details not recognized. Subject: Re: A _good_ and valid use for TPM X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: The development of GRUB 2 List-Id: The development of GRUB 2 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Feb 2009 21:27:20 -0000 On Sat, Feb 21, 2009 at 10:04:22PM +0100, Jan Alsenz wrote: > Hi! > > I don't want to be picky here, but you know that remote attestation is simply > sending signed hash values? Sure. The tricky part is that your computer generates those, but you're not really in control of them. You need to ask your TPM to obtain them, like a beggar. > So if you build me a coreboot/GRUB version with a trusted boot chain I can > happily implement a remote attestation scheme with it and ship it to my customers. That's the beauty of free software; you can do anything you like with it, even nasty things. Just don't expect us to help you get there. -- Robert Millan The DRM opt-in fallacy: "Your data belongs to us. We will decide when (and how) you may access your data; but nobody's threatening your freedom: we still allow you to remove your data and not access it at all."