Open-Source Intel TXT Support Published For Coreboot

[phoronix]

Phoronix: Open-Source Intel TXT Support Published For Coreboot

Thanks to work done by 9elements Cyber Security for an unnamed client, there is now working open-source Intel TXT support for Coreboot with the patches under review for upstream inclusion...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-TXT-Open-Source-Coreboot

[tiennou]

The code is copyrighted by both 9elements and Facebook so it's indeed more than likely that they are the sponsors.

[FireBurn]

Is that the stuff that was just recently proven to be insecure at the CPU level?

[uid313]

This is all really cool, but unfortunately the only one benefiting from this is really Facebook and people with Chromebooks.
The rest of us with laptops and desktop computers cant really run coreboot since it's not supported by consumer hardware.

[kobblestown]

FWIW, one of the few books on the topic - Intel Trusted Execution Technology for Server Platforms is currently free in Kindle format on from Amazon. Probably in recognition that nobody cares about TXT these days. At one time I wanted to make use of it because I had the required hardware but it looks extremely difficult to configure. It's a pity, because the idea to be able to prove that the remote machine is running the exact software stack that you've specified sounded very promising.

[pgeorgi]

FWIW, one of the few books on the topic - Intel Trusted Execution Technology for Server Platforms is currently free in Kindle format on from Amazon. Probably in recognition that nobody cares about TXT these days.

It's an Apress book (see https://www.apress.com/gp/book/9781430261483). There are lots of them that are always free at apress (and sometimes with retailers) because the authors are interested in promoting their technology (and/or product) and less in collecting royalties. They have a few more on Intel boot level technology, and one about coreboot.