TrenchBoot - How to Nicely Boot System with Intel TXT and AMD SVM
Talkat Linux Security Summit North America 2019 · on Monday, 2019-08-19· at 09:50· Sapphire D, Hilton San Diego Bayfront·
summary
TrenchBoot adds a SecureLaunch path so Linux can be dynamically launched on Intel TXT and AMD SVM: GRUB loads an ACM or open AMD DCE, CPU obtains TPM locality 4, clears PCRs and records the DCE into PCR17 measurement, DMA protections use Intel cache-as-RAM or AMD device exclusion vectors, and Intel can SEnter / SEXIT to cap extensions. Implementation uses a stripped tboot as interim SLBoot, GRUB and an extended boot protocol, kernel SL entry/setup patches and a kexec-based runtime launches option; prototypes boot on Intel (network issues remain), AMD work is in progress and patches are on LKML.
AI-written summary · about
chapters (20)
- 0:00Introduction
- 0:56Integrity and Trust
- 6:19Dynamic Launch
- 13:05Transfer Project
- 13:15Why Transfer
- 15:20Motivation
- 16:10Integrity Ecosystem
- 16:45TrenchBoot
- 17:59Secure Launch for Linux
- 18:59Dynamic Launch Ecosystem
- 19:48Standard Use Case
- 20:53Secure Launch Phase
- 21:30grub walkthrough
- 23:10Project status
- 23:24Project history
- 25:24SLBoot
- 26:19Kernel Info Patch
- 27:51Secure Launch Patch
- 29:20Security Engine
- 31:23Questions Answers
related talks
32mTrenchBoot Update
20mReLaunch Revisited: A Refresher on TrenchBoot Late Launch
32mChallenges and Status of Enabling TrenchBoot in Xen Hypervisor
21m(Ab)using Linux as a Trusted Bootloader
39mTOCTOU Attacks Against Secure Boot And BootGuard
48mBooting a Linux Kernel in a Higher Privilege Level
27mIntel Trusted Domain Extensions (TDX) Host Kernel Support
01h 03mTrusted Firmware M : Trusted Boot