Trusted Computing Platforms: TCPA Technology in Context
by Siani Pearson, Boris Balacheff, Liqun Chen, David Plaquin, Graeme Proudler
Data Integrity Registers
If the RTM and measurement agents that measure the boot process of a platform are modified to enforce a secure boot, it is possible for the TPM owner (who is also the platform owner) to dictate that the platform will boot in a prescribed manner or not at all.
A data integrity register (DIR) is a storage register that holds digest values. During a boot process, the RTM or the current measurement agent makes an integrity measurement and incorporates the measurement result into a PCR. In a secure boot process, the RTM or measurement agent then reads the PCR and reads a DIR. If the two values match, the RTM or measurement agent passes control to the measured software, and the boot process continues. If the two values don't ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access