Secure Boot Attacks and Defenses

2.

UEFI Secure Boot Architecture

2.1.

Key Management Infrastructure

2.1.1.

Platform Key (PK)

2.1.1.1.

PK Role and Authority

2.1.1.2.

PK Enrollment Process

2.1.1.3.

PK Revocation Procedures

2.1.1.4.

PK Storage and Protection

2.1.2.

Key Exchange Key (KEK)

2.1.2.1.

KEK Purpose and Function

2.1.2.2.

KEK Database Management

2.1.2.3.

KEK Update Mechanisms

2.1.2.4.

Multiple KEK Support

2.1.3.

Signature Databases

2.1.3.1.

Allowed Signature Database (db)

2.1.3.2.

Forbidden Signature Database (dbx)

2.1.3.3.

Database Update Procedures

2.1.3.4.

Database Synchronization

2.2.

Authenticated Variables

2.2.1.

Variable Authentication Mechanisms

2.2.2.

Secure Variable Storage

2.2.3.

Variable Access Control

2.2.4.

Variable Update Protocols

2.3.

Cryptographic Foundations

2.3.1.

Digital Signature Algorithms

2.3.2.

Hash Functions Used

2.3.3.

Certificate Chain Validation

2.3.4.

Public Key Infrastructure Integration

Previous

1. Fundamentals of Secure Boot

Go to top

Next

3. The Secure Boot Process