TPM 2.0 Future Project/Alternatives

[gonzalo-bulnes]

Coreboot questions would best be asked in the coreboot forums and are off-topic in the Qubes OS forum.

A starting point, though:

Anti evil maid? coreboot? heads?

Hi @regi, let me try: AEM: uses the Intel ME and your TPM chip to verify that the files your computer used to boot haven’t changed. This is done by printing a specific message on screen you have to look for every time you boot. Coreboot: is an Open-Source implementation of a BIOS that works for many computers. This is attractive because it’s code can be audited and it greatly reduces the amount of so-called “blobs” (proprietary binaries that cannot be audited). Heads: is a so-called payload f…