Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-18 Thread Blibbet
>> I wish SeaBIOS documentation included a table comparing BIOS security >> features of all modern implementations, bare-metal and virtualized, to >> compare SeaBIOS's features with other BIOS implementations. > > There is a Wikipedia article that compares SeaBIOS to other > proprietary BIOS

Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-15 Thread Blibbet
On 01/12/2016 11:36 AM, Kevin O'Connor wrote: [...] > As far as a roadmap, I understand there is a plan to add TPM 2.0 > support to SeaBIOS. > > I'm not aware of any new consumer devices shipping with the support, > and I understand that KVM/QEMU have had TPM support for some time > already. > >

Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-15 Thread Peter Stuge
Blibbet wrote: > It sounds like some Chromebooks have SeaBIOS with TPMv1 As far as I know all Chromebooks use their own payload which implements verified boot. The root of trust is the write-protected SPI flash. It is very well documented on the chromium website, you would only have to do very

Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-15 Thread Blibbet
On 01/15/2016 01:14 PM, Peter Stuge wrote: > [...] It is very well documented on the chromium website, you > would only have to do very basic research to find it, which makes it > very difficult for anyone to take your effort seriously. Please move > along. Yes, I don't own a Chromebook, and I

Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-15 Thread Kevin O'Connor
On Fri, Jan 15, 2016 at 12:38:12PM -0800, Blibbet wrote: > On 01/12/2016 11:36 AM, Kevin O'Connor wrote: > [...] > > As far as a roadmap, I understand there is a plan to add TPM 2.0 > > support to SeaBIOS. > > > > I'm not aware of any new consumer devices shipping with the support, > > and I

Re: [SeaBIOS] SeaBIOS security feature roadmap?

2016-01-12 Thread Kevin O'Connor
Hi, On Wed, Jan 06, 2016 at 03:22:24PM -0800, Blibbet wrote: > Hi, > > I'm pretty new to the SeaBIOS codebase. I've noticed a lot of > interesting TPM-centric checkins recently.I was wondering if there was > any roadmap for current/upcoming SeaBIOS security features. I'd be > especially

[SeaBIOS] SeaBIOS security feature roadmap?

2016-01-06 Thread Blibbet
Hi, I'm pretty new to the SeaBIOS codebase. I've noticed a lot of interesting TPM-centric checkins recently.I was wondering if there was any roadmap for current/upcoming SeaBIOS security features. I'd be especially interested in any consumer devices that may have this enhanced BIOS security in