Could anyone explain how the firmware (implementing UEFI, I assume) interacts with the components described here? My knowledge is limited to Tianocore edk2 on amd64 platforms.
How Secure Boot Works on M1 Series Macs
11–20 of 117 posts
Re: How Secure Boot Works on M1 Series Macs
#12Re: How Secure Boot Works on M1 Series Macs
#13Re: How Secure Boot Works on M1 Series Macs
#14Re: How Secure Boot Works on M1 Series Macs
#15[dead]
Re: How Secure Boot Works on M1 Series Macs
#16Could anyone explain how the firmware (implementing UEFI, I assume) interacts with the components described here? My knowledge is limited to Tianocore edk2 on amd64 platforms.
There isn't UEFI or anything like it. iBoot takes that place.
Re: How Secure Boot Works on M1 Series Macs
#17Could anyone explain how the firmware (implementing UEFI, I assume) interacts with the components described here? My knowledge is limited to Tianocore edk2 on amd64 platforms.
There is no UEFI, only a simple boot ROM and the first stage of iBoot is in NOR flash. The rest is all on NVMe. There is a detailed description here:
Re: How Secure Boot Works on M1 Series Macs
#18Earlier quoted context omitted.
Yet companies still try to convince you otherwise...
Show me where Apple says they protect against attackers who already have your passcode.
That's not what I was talking about... secure boot and locked boot loaders are "protected" with keys held by manufacturers...
Re: How Secure Boot Works on M1 Series Macs
#19Could anyone explain how the firmware (implementing UEFI, I assume) interacts with the components described here? My knowledge is limited to Tianocore edk2 on amd64 platforms.
[deleted]
Re: How Secure Boot Works on M1 Series Macs
#20completely insecure if you are not the only one with the key
How do you secure something when other's know the secret? There has to be some "secret" (aka key) that some definition of "you" only knows, that the system then tests against (hopefully via some kind of asymmetric system or hash).
Public/private keys?
In this case, since others already know it, signing something is sufficient.