It's https://gist.github.com/dougallj/7a75a3be1ec69ca550e7c36dc75...
properly implemented, hw encryption is better because it does not expose key material in the RAM even for a brief moment.
The paper is nice, however it covers an ancient AMT version. AFAIK this won't work on recent versions (it has saner defaults).
>It includes in it the ME blob No, it does not. FSP only includes x86 code to be executed on the main CPU. It may include stuff which talks to the ME but no ME firmware itself. You can use any UEFI extractor like…
It's https://gist.github.com/dougallj/7a75a3be1ec69ca550e7c36dc75...
properly implemented, hw encryption is better because it does not expose key material in the RAM even for a brief moment.
The paper is nice, however it covers an ancient AMT version. AFAIK this won't work on recent versions (it has saner defaults).
>It includes in it the ME blob No, it does not. FSP only includes x86 code to be executed on the main CPU. It may include stuff which talks to the ME but no ME firmware itself. You can use any UEFI extractor like…