https://blog.3mdeb.com/tags/fobnail/ Recent content in fobnail on Thoughts dereferenced from the scratchpad noise. Hugo -- gohugo.io en-us Fri, 19 May 2023 00:00:00 +0000 https://blog.3mdeb.com/2023/2023-05-19-fobnail_application/ Fri, 19 May 2023 00:00:00 +0000 https://blog.3mdeb.com/2023/2023-05-19-fobnail_application/ About the Fobnail project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2022/2022-06-23-fobnail_minimal_os/ Thu, 23 Jun 2022 00:00:00 +0000 https://blog.3mdeb.com/2022/2022-06-23-fobnail_minimal_os/ About the Fobnail Token project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2022/2022-05-25-fobnail_provisioning/ Wed, 25 May 2022 00:00:00 +0000 https://blog.3mdeb.com/2022/2022-05-25-fobnail_provisioning/ About the Fobnail project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2022/2022-04-06-fobnail_attestation_phase/ Wed, 06 Apr 2022 00:00:00 +0000 https://blog.3mdeb.com/2022/2022-04-06-fobnail_attestation_phase/ About the Fobnail project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2022/2022-03-21-fobnail_3rd_phase/ Mon, 21 Mar 2022 00:00:00 +0000 https://blog.3mdeb.com/2022/2022-03-21-fobnail_3rd_phase/ About the Fobnail project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2021/2021-12-15-fobnail_2nd_phase/ Wed, 15 Dec 2021 00:00:00 +0000 https://blog.3mdeb.com/2021/2021-12-15-fobnail_2nd_phase/ About the Fobnail project Fobnail is a project that aims to provide a reference architecture for building offline integrity measurement verifiers on the USB device (Fobnail Token) and attesters running in Dynamically Launched Measured Environments (DLME). It allows the Fobnail owner to verify the trustworthiness of the running system before performing any sensitive operation. This project was founded by NlNet Foundation. More information about the project can be found in the Fobnail documentation. https://blog.3mdeb.com/2021/2021-10-28-fobnail-promotion/ Thu, 28 Oct 2021 00:00:00 +0000 https://blog.3mdeb.com/2021/2021-10-28-fobnail-promotion/ Introduction System boot security has been gaining more and more attention and importance due to forever increasing complexity of attacks on the software and firmware. Firmware vendors are incorporating more and more security features into the BIOS and UEFI, but let’s be honest: due to UEFI complexity it has been often proved that the implementation of such features may be buggy and provide wider attacks surface, e.g. BootGuardDxe flaw presented by Alex Matrosov at BlackHat USA 2017 even if the firmware offers high-level security features it is still pretty hard to leverage it out-of-the-box in a user-friendly manner closed source nature of the firmware limits its auditability (and security as well, bugs can be hunted easier when the code is open) Because of the above reasons many entities fail to correctly secure the boot process and protects the consumers hardware from the attackers.