ProHoster > ื‘ืœืึธื’ > ืึทื“ืžื™ื ื™ืกื˜ืจืึทืฆื™ืข > Schrรถdinger's Trusted Download. Intel Boot Guard

Schrรถdinger's Trusted Download. Intel Boot Guard

Schrรถdinger's Trusted Download. Intel Boot Guard
ืžื™ืจ ืคืึธืจืฉืœืึธื’ืŸ ืฆื• ื’ื™ื™ืŸ ืึทืจืึธืคึผ ืฆื• ืึท ื ื™ื“ืขืจื™ืง ืžื“ืจื’ื” ื•ื•ื™ื“ืขืจ ืื•ืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืคื™ืจืžื•ื•ืึทืจืข ืคึฟืึทืจ ืงืก86 ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืก. ื“ืึธืก ืžืึธืœ, ื“ื™ ื”ื•ื™ืคึผื˜ ื™ื ื’ืจื™ื“ื™ืึทื ื˜ ืคื•ืŸ ื“ืขื ืœืขืจื ืขืŸ ืื™ื– Intel Boot Guard (ื ื™ื˜ ืฆื• ื–ื™ื™ืŸ ืฆืขืžื™ืฉื˜ ืžื™ื˜ Intel BIOS Guard!) - ืึท ื™ื™ึทื–ื ื•ื•ืึทืจื’-ื’ืขืฉื˜ื™ืฆื˜ ื˜ืจืึทืกื˜ื™ื“ ื‘ื™ื™ืึธื•ืก ืฉื˜ื™ื•ื•ืœ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื•ื•ืึธืก ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืกื™ืกื˜ืขื ืคืึทืจืงื•ื™ืคืขืจ ืงืขื ืขืŸ ืคึผืขืจืžืึทื ืึทื ื˜ืœื™ ื’ืขื‘ืŸ ืึธื“ืขืจ ื“ื™ืกื™ื™ื‘ืึทืœ ื‘ื™ื™ ื“ื™ ืคึผืจืึธื“ื•ืงืฆื™ืข ื‘ื™ื ืข. ื ื•, ื“ืขืจ ืคืึธืจืฉื•ื ื’ ืจืขืฆืขืคึผื˜ ืื™ื– ืฉื•ื™ืŸ ื‘ืึทืงืึทื ื˜ ืฆื• ืื•ื ื“ื–: ืฆืขื”ืึทืงืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืžื™ื˜ ืคืึทืจืงืขืจื˜ ื™ื ื–ืฉืขื ื™ืขืจื™ืข, ื‘ืึทืฉืจื™ื™ึทื‘ืŸ ื–ื™ื™ึทืŸ ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ, ืคึผืœืึธืžื‘ื™ืจืŸ ืขืก ืžื™ื˜ ืึทื ื“ืึทืงื™ืึทืžืขื ื™ื“ ื“ืขื˜ืึทื™ืœืก, ืกืขื–ืึธืŸ ืขืก ืžื™ื˜ ืึทื˜ืึทืง ื•ื•ืขืงื˜ืึธืจืก ืฆื• ื’ืขืฉืžืึทืง ืื•ืŸ ืžื™ืฉืŸ. ืœืึธืžื™ืจ ืœื™ื™ื’ืŸ ื‘ืจืขื ื•ื•ืึทืจื’ ืฆื• ื“ืขืจ ื’ืขืฉื™ื›ื˜ืข ืคื•ืŸ โ€‹โ€‹ื•ื•ื™ ืึท ื–ืฉื•ืง ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ืงืœืึธื•ื ื“ ืคึฟืึทืจ ื™ืึธืจืŸ ืื™ืŸ ื“ื™ ืคึผืจืึธื“ื•ืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืขื˜ืœืขื›ืข ื•ื•ืขื ื“ืึธืจืก ืึทืœืึทื•ื– ืึท ืคึผืึธื˜ืขื ืฆื™ืขืœ ืึทื˜ืึทืงืขืจ ืฆื• ื ื•ืฆืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืฆื• ืฉืึทืคึฟืŸ ืึท ืคืึทืจื‘ืึธืจื’ืŸ ืจืึธืึธื˜ืงื™ื˜ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื ื•ื•ืึธืก ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ (ืืคื™ืœื• ืžื™ื˜ ืึท ืคึผืจืึธื’ืจืึทืžื™ืกื˜).

ื“ื•ืจืš ื“ืขื ื•ื•ืขื’, ื“ืขืจ ืึทืจื˜ื™ืงืœ ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืจื™ืคึผืึธืจืฅ "On Guard of Rootkits: Intel BootGuard" ืคึฟื•ืŸ ื“ืขืจ ื–ื™ืฆื•ื ื’ ZeroNights 2016 ืื•ืŸ 29ื˜ืข ื‘ืึทื’ืขื’ืขื ื™ืฉ ื“ืขืคืงืึธืŸ ืจื•ืกืœืึทื ื“ (ื‘ื™ื™ื“ืข ืคึผืจืขื–ืึทื ื˜ื™ื™ืฉืึทื ื– ื“ืึธ).

ืคื™ืจืžื•ื•ืึทืจืข ืคึฟืึทืจ ืึท ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืžื™ื˜ Intel 64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ

ืขืจืฉื˜ืขืจ, ืœืึธื–ืŸ ืื•ื ื“ื– ืขื ื˜ืคึฟืขืจืŸ ื“ื™ ืงืฉื™ื: ื•ื•ืึธืก ืื™ื– ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ืึท ืžืึธื“ืขืจืŸ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืžื™ื˜ ื™ื ื˜ืขืœ 64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ? ืคื•ืŸ ืงื•ืจืก, UEFI BIOS. ืึธื‘ืขืจ ืึทื–ืึท ืขื ื˜ืคืขืจ ื•ื•ืขื˜ ื ื™ืฉื˜ ื–ื™ื™ืŸ ืคึผื™ื ื˜ืœืขืš. ื–ืืœ ืก ื ืขืžืขืŸ ืึท ืงื•ืง ืื™ืŸ ื“ื™ ื‘ื™ืœื“, ื•ื•ืึธืก ื•ื•ื™ื™ื–ื˜ ื“ื™ ื“ืขืกืงื˜ืึทืคึผ (ืœืึทืคึผื˜ืึทืคึผ) ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ.

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ืขืจ ื™ืกื•ื“ ืื™ื– ื“ื™ ืœื™ื ืง:

  • ืคึผืจืึทืกืขืกืขืจ (ืงืคึผื•, ืกืขื ื˜ืจืึทืœ ืคึผืจืึทืกืขืกื™ื ื’ ื™ื•ื ื™ื˜), ื•ื•ืึธืก, ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ื”ื•ื™ืคึผื˜ ืงืึธืจืขืก, ื”ืื˜ ืึท ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ื’ืจืึทืคื™ืงืก ื”ืึทืจืฅ (ื ื™ื˜ ืื™ืŸ ืึทืœืข ืžืึธื“ืขืœืก) ืื•ืŸ ืึท ื–ื›ึผืจื•ืŸ ืงืึธื ื˜ืจืึธืœืœืขืจ (ื™ืžืง, ื™ื ื˜ืขื’ืจืึทื˜ืขื“ ื–ื›ึผืจื•ืŸ ืงืึธื ื˜ืจืึธืœืœืขืจ);
  • ื˜ืฉื™ืคึผืกืขื˜ (PCH, Platform Controller Hub), ืžื™ื˜ ืคืึทืจืฉื™ื“ืŸ ืงืึทื ื˜ืจืึธื•ืœืขืจื– ืคึฟืึทืจ ื™ื ื˜ืขืจืึทืงื˜ื™ื ื’ ืžื™ื˜ ืคึผืขืจื™ืคืขืจืึทืœ ื“ืขื•ื•ื™ืกืขืก ืื•ืŸ ืึธื ืคื™ืจื•ื ื’ ืกืึทื‘ืกื™ืกื˜ืึทืžื–. ืฆื•ื•ื™ืฉืŸ ื–ื™ื™ ืื™ื– ื“ืขืจ ื‘ืืงืื ื˜ืขืจ Intel Management Engine (ME), ื•ื•ืึธืก ืื•ื™ืš ื”ืื˜ ืคื™ืจืžื•ื•ืึทืจืข (Intel ME ืคื™ืจืžื•ื•ืึทืจืข).

ืœืึทืคึผื˜ืึธืคึผืก, ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ืื•ื™ื‘ืŸ, ื“ืึทืจืคืŸ ืึท ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืงืึธื ื˜ืจืึธืœืœืขืจ (ACPI EC, Advanced Control ืื•ืŸ Power Interface Embedded Controller), ื•ื•ืึธืก ืื™ื– ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืžืึทื›ื˜ ืกืึทื‘ืกื™ืกื˜ืึทื, ื˜ืึธื•ื˜ืฉืคึผืึทื“, ืงืœืึทื•ื•ื™ืึทื˜ื•ืจ, Fn ืฉืœื™ืกืœืขืŸ (ืคืึทืจืฉื˜ืขืœืŸ ื‘ืจื™ื™ื˜ื ืึทืก, ื’ืขื–ื•ื ื˜ ื‘ืึทื ื“) , ืงืœืึทื•ื•ื™ืึทื˜ื•ืจ ื‘ืึทืงืœื™ื™ื˜, ืืื–"ื• ื•) ืื•ืŸ ืื ื“ืขืจืข ื–ืื›ืŸ. ืื•ืŸ ืขืก ืื•ื™ืš ื”ืื˜ ื–ื™ื™ึทืŸ ืื™ื™ื’ืขื ืข ืคื™ืจืžื•ื•ืึทืจืข.

ืึทื–ื•ื™, ื“ื™ ื˜ืึธื•ื˜ืึทืœืึทื˜ื™ ืคื•ืŸ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืื•ื™ื‘ืŸ ืื™ื– ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข (ืกื™ืกื˜ืขื ืคื™ืจืžื•ื•ืึทืจืข), ื•ื•ืึธืก ืื™ื– ืกื˜ืึธืจื“ ืื•ื™ืฃ ืึท ืคึผืจืึธืกื˜ ืกืคึผื™ ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ. ืึทื–ื•ื™ ืึทื– ื“ื™ ื ื™ืฆืขืจืก ืคื•ืŸ ื“ืขื ื–ื›ึผืจื•ืŸ ื˜ืึธืŸ ื ื™ื˜ ืฆืขืžื™ืฉื˜ ื•ื•ืขื’ืŸ ื•ื•ื• ืขืก ืื™ื–, ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ืขื ื–ื›ึผืจื•ืŸ ืื™ื– ืฆืขื˜ื™ื™ืœื˜ ืื™ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืžืงื•ืžื•ืช (ื•ื•ื™ ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ื“ื™ ืคื™ื’ื•ืจ):

  • UEFI BIOS;
  • ACPI EC ืคื™ืจืžื•ื•ืึทืจืข (ืึท ื‘ืึทื–ื•ื ื“ืขืจ ื’ืขื’ื ื˜ ืื™ื– ืืจื•ื™ืก ืžื™ื˜ ื“ื™ Skylake ืคึผืจืึทืกืขืกืขืจ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข (2015), ืึธื‘ืขืจ ืื™ืŸ-ื“ื™-ื•ื•ื™ืœื“ ืžื™ืจ ื”ืึธื‘ืŸ ื ืึธืš ื ื™ืฉื˜ ื’ืขื–ืขืŸ ื‘ื™ื™ืฉืคื™ืœืŸ ืคื•ืŸ ื–ื™ื™ึทืŸ ื ื•ืฆืŸ, ืึทื–ื•ื™ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืงืึธื ื˜ืจืึธืœืœืขืจ ืื™ื– ื ืึธืš ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก) ;
  • ื™ื ื˜ืขืœ ืžื™ืจ ืคื™ืจืžื•ื•ืึทืจืข;
  • ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ (ืžืึทืง ืึทื“ืจืขืก, ืืื–"ื• ื•) ืคื•ืŸ ื“ื™ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ื’ื‘ืข (ื’ื™ื’ืึทื‘ื™ื˜ ืขื˜ื”ืขืจื ืขื˜) ื ืขืฅ ืึทื“ืึทืคึผื˜ืขืจ;
  • ืคืœืึทืฉ ื“ืขืกืงืจื™ืคึผื˜ืึธืจืก ื–ืขื ืขืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ื’ืขื’ื ื˜ ืคื•ืŸ ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ื•ื•ืึธืก ื›ึผื•ืœืœ ืคึผื•ื™ื ื˜ืขืจื– ืฆื• ืื ื“ืขืจืข ืžืงื•ืžื•ืช, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืคึผืขืจืžื™ืฉืึทื ื– ืฆื• ืึทืงืกืขืก ื–ื™ื™.

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ื™ SPI ื•ื™ื˜ืึธื‘ื•ืก ื‘ืขืœ, ืึท SPI ืงืึธื ื˜ืจืึธืœืœืขืจ ื’ืขื‘ื•ื™ื˜ ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜, ื“ื•ืจืš ื•ื•ืึธืก ื“ืขื ื–ื›ึผืจื•ืŸ ืื™ื– ืึทืงืกืขืกื˜, ืื™ื– ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื“ื™ืœื™ืžืึทื˜ื™ื ื’ ืึทืงืกืขืก ืฆื• ืžืงื•ืžื•ืช (ืื™ืŸ ืœื•ื™ื˜ ืžื™ื˜ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ืคึผืขืจืžื™ืฉืึทื ื–). ืื•ื™ื‘ ืคึผืขืจืžื™ืฉืึทื ื– ื–ืขื ืขืŸ ื‘ืึทืฉื˜ื™ืžื˜ ืฆื• ื™ื ื˜ืขืœ ืก ืจืขืงืึทืžืขื ื“ื™ื“ (ืคึฟืึทืจ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกื™ื‘ื•ืช) ื•ื•ืึทืœื•ืขืก, ื™ืขื“ืขืจ SPI ื‘ืœื™ืฅ ื‘ืึทื ื™ืฆืขืจ ื”ืื˜ ืคื•ืœ ืึทืงืกืขืก (ืœื™ื™ืขื ืขืŸ / ืฉืจื™ื™ึทื‘ืŸ) ื‘ืœื•ื™ื– ืฆื• ื–ื™ื™ืขืจ ื’ืขื’ื ื˜. ืื•ืŸ ื“ื™ ืžื ื•ื—ื” ื–ืขื ืขืŸ ืึธื“ืขืจ ื‘ืœื•ื™ื– ืœื™ื™ืขื ืขืŸ ืึธื“ืขืจ ื™ื ืึทืงืกืขืกืึทื‘ืึทืœ. ื ื‘ืื•ื•ื•ืกื˜ืขืจ ืคืึทืงื˜: ืื•ื™ืฃ ืคื™ืœืข ืกื™ืกื˜ืขืžืขืŸ, ื“ื™ ืงืคึผื• ื”ืื˜ ืคื•ืœ ืึทืงืกืขืก ืฆื• ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ืื•ืŸ GbE, ืœื™ื™ืขื ืขืŸ ืึทืงืกืขืก ื‘ืœื•ื™ื– ืฆื• ื‘ืœื™ืฅ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ืื•ืŸ ืงื™ื™ืŸ ืึทืงืกืขืก ืฆื• ื“ื™ Intel ME ื’ืขื’ื ื˜. ืคืืจื•ื•ืืก ืื•ื™ืฃ ืคื™ืœืข, ืื•ืŸ ื ื™ืฉื˜ ืื•ื™ืฃ ืึทืœืข? ื•ื•ืึธืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืื™ื– ื ื™ืฉื˜ ืคืืจืœืื ื’ื˜. ืžื™ืจ ื•ื•ืขื˜ ื–ืึธื’ืŸ ืื™ืจ ืžืขืจ ืื™ืŸ ื“ืขื˜ืึทืœ ืฉืคึผืขื˜ืขืจ ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ.

ืžืขืงืึทื ื™ื–ืึทืžื– ืคึฟืึทืจ ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธืŸ

ื“ืึธืš, ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ืึท ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ื–ืึธืœ ื–ื™ื™ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืคื•ืŸ ืžืขื’ืœืขืš ืงืึธืžืคึผืจืึธืžื™ืก, ื•ื•ืึธืก ื•ื•ืึธืœื˜ ืœืึธื–ืŸ ืึท ืคึผืึธื˜ืขื ืฆื™ืขืœ ืึทื˜ืึทืงืขืจ ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึท ืคื•ื˜ื›ืึธื•ืœื“ ืื™ืŸ ืขืก (ื‘ืœื™ื™ึทื‘ื  ืœืขื‘ืŸ ืึทืก ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ / ืจื™ื™ื ืกื˜ืึทืœืœื™ื™ืฉืึทื ื–), ื•ื™ืกืคื™ืจืŸ ื–ื™ื™ืขืจ ืงืึธื“ ืื™ืŸ ื“ื™ ืžืขืจืกื˜ ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืžืึธื“ืขืก, ืืื–"ื• ื•. ืื•ืŸ ืจื™ืกื˜ืจื™ืงื˜ื™ื ื’ ืึทืงืกืขืก ืฆื• SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืžืงื•ืžื•ืช ืื™ื–, ืคื•ืŸ ืงื•ืจืก, ื ื™ืฉื˜ ื’ืขื ื•ื’. ื“ืขืจื™ื‘ืขืจ, ืฆื• ื‘ืึทืฉื™ืฆืŸ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธื ืก, ืคืึทืจืฉื™ื“ืŸ ืžืขืงืึทื ื™ื–ืึทืžื– ืกืคึผืขืฆื™ืคื™ืฉ ืฆื• ื™ืขื“ืขืจ ืึทืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื•ื•ื™ื•ื•ืข ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜.

ืื–ื•ื™, ื“ื™ Intel ME ืคื™ืจืžื•ื•ืึทืจืข ืื™ื– ื’ืขื—ืชืžืขื˜ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืื•ืŸ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™, ืื•ืŸ ืื™ื– ืึธืคึผื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ME ืงืึธื ื˜ืจืึธืœืœืขืจ ื™ืขื“ืขืจ ืžืึธืœ ืขืก ืื™ื– ืœืึธื•ื“ื™ื“ ืื™ืŸ ื“ื™ ME UMA ื–ื›ึผืจื•ืŸ. ื“ืขืจ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคึผืจืึธืฆืขืก ืื™ื– ืฉื•ื™ืŸ ื“ื™ืกืงืึทืกื˜ ื“ื•ืจืš ืื•ื ื“ื– ืื™ืŸ ืื™ื™ื ืขืจ ืคื•ืŸ ืืจื˜ื™ืงืœืขืŸ, ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืฆื• ื“ื™ Intel ME ืกื•ื‘ืกื™ืกื˜ืขื.

ืื•ืŸ ACPI EC ืคื™ืจืžื•ื•ืึทืจืข, ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, ืื™ื– ืึธืคึผื’ืขืฉื˜ืขืœื˜ ื‘ืœื•ื™ื– ืคึฟืึทืจ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜. ืึธื‘ืขืจ, ืจืขื›ื˜ ืฆื• ื“ืขื ืคืึทืงื˜ ืึทื– ื“ื™ ื‘ื™ื™ื ืขืจื™ ืื™ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก, ืขืก ืื™ื– ื›ึผืžืขื˜ ืฉื˜ืขื ื“ื™ืง ืื•ื ื˜ืขืจื˜ืขื ื™ืง ืฆื• ื“ื™ ื–ืขืœื‘ืข ืฉื•ืฅ ืžืขืงืึทื ื™ื–ืึทืžื– ืึทื– ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ื ื™ืฆื˜. ืœืึธืžื™ืจ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื–ื™ื™.

ื“ื™ ืžืขืงืึทื ื™ื–ืึทืžื– ืงืขื ืขืŸ ื–ื™ื™ืŸ ืฆืขื˜ื™ื™ืœื˜ ืื™ืŸ ืฆื•ื•ื™ื™ ืงืึทื˜ืขื’ืึธืจื™ืขืก.

ืฉืจื™ื™ื‘ ืฉื•ืฅ ืื™ืŸ ื“ื™ UEFI BIOS ื’ืขื’ื ื˜

  1. ื’ืฉืžื™ื•ืช ืฉื•ืฅ ืคื•ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืžื™ื˜ ืึท ืฉืจื™ื™ึทื‘ืŸ-ื‘ืึทืฉื™ืฆืŸ ื“ื–ืฉืึทืžืคึผืขืจ;
  2. ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ื“ื™ ืคึผืจื•ื™ืขืงืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ื’ืขื’ื ื˜ ืื™ืŸ ื“ื™ ืงืคึผื• ืึทื“ืจืขืก ืคึผืœืึทืฅ ื ื™ืฆืŸ PRx ื˜ืฉื™ืคึผืกืขื˜ ืจืขื“ื–ืฉื™ืกื˜ืขืจืก;
  3. ื‘ืœืึทืงื™ื ื’ ืคืจื•ื•ื•ืŸ ืฆื• ืฉืจื™ื™ึทื‘ืŸ ืฆื• ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ื’ืขื’ื ื˜ ื“ื•ืจืš ื“ื–ืฉืขื ืขืจื™ื™ื˜ื™ื ื’ ืื•ืŸ ืคึผืจืึทืกืขืกื™ื ื’ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืกืžื™ ื™ื‘ืขืจืจื™ื™ึทืก ื“ื•ืจืš ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ BIOS_WE/BLE ืื•ืŸ SMM_BWP ื‘ื™ื˜ืŸ ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืจืขื“ื–ืฉื™ืกื˜ืขืจืก;
  4. ื ืžืขืจ ืึทื•ื•ืึทื ืกื™ืจื˜ืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ื“ืขื ืฉื•ืฅ ืื™ื– Intel BIOS Guard (PFAT).

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ืžืขืงืึทื ื™ื–ืึทืžื–, ื•ื•ืขื ื“ืึธืจืก ืงืขื ืขืŸ ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ืื•ืŸ ื™ื ืกื˜ืจื•ืžืขื ื˜ ื–ื™ื™ืขืจ ืื™ื™ื’ืขื ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื™ื˜ืœืขืŸ (ืœืžืฉืœ, ืกื™ื™ื ื™ื ื’ ืงืึทืคึผืกืึทืœื– ืžื™ื˜ UEFI BIOS ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ).

ืขืก ืื™ื– ื•ื•ื™ื›ื˜ื™ืง ืฆื• ื˜ืึธืŸ ืึทื– ืื•ื™ืฃ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืกื™ืกื˜ืขื (ื“ื™ืคึผืขื ื“ื™ื ื’ ืื•ื™ืฃ ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ), ื ื™ื˜ ืึทืœืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืื•ื™ื‘ืŸ ืฉื•ืฅ ืžืขืงืึทื ื™ื–ืึทืžื– ืงืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ืขื ื“ื˜, ื–ื™ื™ ืงืขืŸ ื ื™ืฉื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ืขื ื“ื˜ ืื™ืŸ ืึทืœืข, ืึธื“ืขืจ ื–ื™ื™ ืงืขืŸ ื–ื™ื™ืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ืึท ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืฉื˜ื™ื™ื’ืขืจ. ืื™ืจ ืงืขื ื˜ ืœื™ื™ืขื ืขืŸ ืžืขืจ ื•ื•ืขื’ืŸ ื“ื™ ืžืขืงืึทื ื™ื–ืึทืžื– ืื•ืŸ ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืžื™ื˜ ื–ื™ื™ืขืจ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ. ืคึฟืึทืจ ื“ื™ ืื™ื ื˜ืขืจืขืกื™ืจื˜, ืžื™ืจ ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืึทื– ืื™ืจ ืœื™ื™ืขื ืขืŸ ื“ื™ ื’ืื ืฆืข ืกืขืจื™ืข ืคื•ืŸ โ€‹โ€‹ืึทืจื˜ื™ืงืœืขืŸ ืื•ื™ืฃ UEFI BIOS ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึฟื•ืŸ ืงืึธื“ืจื•ืฉ.

UEFI BIOS ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ

ื•ื•ืขืŸ ืžื™ืจ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื˜ืจืึทืกื˜ื™ื“ ืฉื˜ื™ื•ื•ืœ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื–, ื“ืขืจ ืขืจืฉื˜ืขืจ ื–ืึทืš ื•ื•ืึธืก ืงื•ืžื˜ ืฆื• ืžื™ื™ื ื•ื ื’ ืื™ื– ื–ื™ื›ืขืจ ืฉื˜ื™ื•ื•ืœ. ืึธื‘ืขืจ, ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจืึทืœื™ ืขืก ืื™ื– ื“ื™ื–ื™ื™ื ื“ ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืฆื• ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก (ื“ืจื™ื•ื•ืขืจืก, ื‘ืึธืึธื˜ืœืึธืึทื“ืขืจืก, ืืื–"ื• ื•) ืื•ืŸ ื ื™ืฉื˜ ื“ื™ ืคื™ืจืžื•ื•ืึทืจืข ื–ื™ืš.

ื“ืขืจื™ื‘ืขืจ, Intel, ืื™ืŸ SoCs ืžื™ื˜ Bay Trail ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข (2012), ื™ืžืคึผืœืึทืžืขื ืึทื“ ืึท ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื ื™ื˜-ืคืึทืจืงืจื™ืคึผืœื˜ ื–ื™ื›ืขืจ ืฉื˜ื™ื•ื•ืœ (ื•ื•ืขืจื™ืคื™ืขื“ ืฉื˜ื™ื•ื•ืœ), ื•ื•ืึธืก ื”ืื˜ ื’ืึธืจื ื™ืฉื˜ ืื™ืŸ ืคึผืจืึธืกื˜ ืžื™ื˜ ื“ื™ ืื•ื™ื‘ืŸ-ื“ืขืจืžืื ื˜ ืกืขืงื•ืจืข ื‘ืึธืึธื˜ ื˜ืขื›ื ืึธืœืึธื’ื™ืข. ืฉืคึผืขื˜ืขืจ (2013), ื“ืขื ืžืขืงืึทื ื™ื–ืึทื ืื™ื– ื™ืžืคึผืจื•ื•ื•ื“ ืื•ืŸ ื‘ืืคืจื™ื™ื˜ ืื•ื ื˜ืขืจ ื“ื™ ื ืึธืžืขืŸ Intel Boot Guard ืคึฟืึทืจ ื“ืขืกืงื˜ืึทืคึผืก ืžื™ื˜ Haswell ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข.

ืื™ื™ื“ืขืจ ื“ื™ืกืงืจื™ื™ื‘ื™ื ื’ Intel Boot Guard, ืœืึธื–ืŸ ืื•ื ื“ื– ืงื•ืง ืื™ืŸ ื“ื™ ื“ื•ืจื›ืคื™ืจื•ื ื’ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ืื™ืŸ ื“ื™ Intel 64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ, ื•ื•ืึธืก, ืื™ืŸ ืงืึธืžื‘ื™ื ืึทืฆื™ืข, ื–ืขื ืขืŸ ื“ื™ ืจื•ืฅ ืคื•ืŸ ืฆื•ื˜ืจื•ื™ ืคึฟืึทืจ ื“ืขื ื˜ืจืึทืกื˜ื™ื“ ืฉื˜ื™ื•ื•ืœ ื˜ืขื›ื ืึธืœืึธื’ื™ืข.

ื™ื ื˜ืขืœ ืงืคึผื•

ืงืึทืคึผ ืกืึทื’ื“ื–ืฉืขืกืฅ ืึทื– ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ ืื™ื– ื“ื™ ื”ื•ื™ืคึผื˜ ื“ื•ืจื›ืคื™ืจื•ื ื’ ืกื•ื•ื™ื•ื•ืข ืื™ืŸ ื“ื™ ื™ื ื˜ืขืœ 64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ. ืคืืจื•ื•ืืก ืื™ื– ืขืก ื“ืขืจ ื•ื•ืึธืจืฆืœ ืคื•ืŸ ืฆื•ื˜ืจื•ื™? ืขืก ื•ื•ืฒึทื–ื˜ ื–ื™ืš ืื•ื™ืก, ืึทื– ื“ืึธืก, ื•ื•ืึธืก ืžืึทื›ื˜ ืื™ื ืึทื–ืึท, ืื™ื– ื“ืึธืก ืคึฟืึทืจืžืึธื’ ืคึฟื•ืŸ ื“ื™ ื“ืึธื–ื™ืงืข ืขืœืขืžืขื ื˜ืŸ:

  • ืžื™ืงืจืึธืงืึธื“ืข ืจืึทื ืื™ื– ืึท ื ื™ื˜-ื•ื•ืึทืœืึทื˜ืึทืœ, ื ื™ื˜-ืจื™ืจื™ื™ื˜ืึทื‘ืึทืœ ื–ื›ึผืจื•ืŸ ืคึฟืึทืจ ืกื˜ืึธืจื™ื ื’ ืžื™ืงืจืึธืงืึธื“ืข. ืขืก ืื™ื– ื’ืขืžื™ื™ื ื˜ ืึทื– ืžื™ืงืจืึธืงืึธื“ืข ืื™ื– ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืคึผืจืึทืกืขืกืขืจ ื‘ืึทืคึฟืขืœืŸ ืกื™ืกื˜ืขื ืžื™ื˜ ื“ื™ ืกื™ืžืคึผืœืึทืกื˜ ื™ื ืกื˜ืจืึทืงืฉืึทื ื–. ื›ืึทืคึผืึทื ื– ืื•ื™ืš ืื™ืŸ ืžื™ืงืจืึธืงืึธื“ืข ื‘ืึทื’ื–. ืึทื–ื•ื™ ืื™ืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก ืื™ืจ ืงืขื ืขืŸ ื’ืขืคึฟื™ื ืขืŸ ื‘ื™ื ืึทืจื™ืขืก ืžื™ื˜ ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ (ืึธื•ื•ื•ืขืจืœื™ื™ื“ ื‘ืขืฉืึทืก ืฉื˜ื™ื•ื•ืœ, ื•ื•ื™ื™ึทืœ ืจืึทื ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ). ื“ืขืจ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ื‘ื™ื ืึทืจื™ืขืก ืื™ื– ื™ื ืงืจื™ืคึผื˜ื™ื“, ื•ื•ืึธืก ืงืึทืžืคึผืœื™ืงื™ื™ืฅ ื–ื™ื™ืขืจ ืึทื ืึทืœื™ืกื™ืก (ื“ืขืจื™ื‘ืขืจ, ื“ืขืจ ืกืคึผืขืฆื™ืคื™ืฉ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ืžื™ืงืจืึธืงืึธื“ืข ืื™ื– ื‘ืืงืื ื˜ ื‘ืœื•ื™ื– ืฆื• ื“ื™ ื•ื•ืืก ืึทื ื˜ื•ื•ื™ืงืœืขืŸ ืขืก), ืื•ืŸ ื’ืขื—ืชืžืขื˜ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืื•ืŸ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™;
  • ืึทืขืก ืฉืœื™ืกืœ ืคึฟืึทืจ ื“ืขืงืจื™ืคึผื˜ื™ื ื’ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ;
  • ื”ืึทืฉ ืคื•ืŸ ื“ื™ RSA ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ ื’ืขื ื™ืฆื˜ ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ;
  • RSA ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ ื”ืึทืฉ, ื•ื•ืึธืก ื•ื•ืขืจืึทืคื™ื™ื– ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ื™ื ื˜ืขืœ-ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืึทืงื (ืึทื•ื˜ื”ืขื ื˜ื™ืงืึทื˜ืขื“ ืงืึธื•ื“ ืžืึธื“ื•ืœืข) ืงืึธื“ ืžืึทื“ื–ืฉื•ืœื–, ื•ื•ืึธืก ื“ื™ ืงืคึผื• ืงืขื ืขืŸ ืงืึทื˜ืขืจ ืื™ื™ื“ืขืจ ื‘ื™ื™ืึธื•ืก ื“ื•ืจื›ืคื™ืจื•ื ื’ (ื”ืขืœื ืžื™ืงืจืึธืงืึธื“ืข) ืึธื“ืขืจ ื‘ืขืฉืึทืก ื–ื™ื™ึทืŸ ืึธืคึผืขืจืึทืฆื™ืข, ื•ื•ืขืŸ ื–ื™ื›ืขืจ ื’ืขืฉืขืขื ื™ืฉืŸ ืคึผืึทืกื™ืจืŸ.

Intel ME

ืื•ื ื“ื–ืขืจ ื‘ืœืึธื’ ืื™ื– ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืฆื• ื“ืขื ืกืึทื‘ืกื™ืกื˜ืึทื ะดะฒะต ืึทืจื˜ื™ืงืœ. ื–ืืœ ืื•ื ื“ื– ืฆื•ืจื™ืงืจื•ืคืŸ ืึทื– ื“ื™ ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ืกื•ื•ื™ื•ื•ืข ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืึท ืžื™ืงืจืึธืงืึธื ื˜ืจืึธืœืœืขืจ ื’ืขื‘ื•ื™ื˜ ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืื•ืŸ ืื™ื– ื“ื™ ืžืขืจืกื˜ ืคืึทืจื‘ืึธืจื’ืŸ ืื•ืŸ ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื.

ื˜ืจืึธืฅ ื–ื™ื™ืŸ ื‘ืขืกืึธื“ื™ืงื™ื™ึทื˜, Intel ME ืื™ื– ืื•ื™ืš ืึท ื•ื•ืึธืจืฆืœ ืคื•ืŸ ืฆื•ื˜ืจื•ื™ ื•ื•ื™ื™ึทืœ ืขืก ื”ืื˜:

  • ME ROM - ื ื™ื˜-ื•ื•ืึทืœืึทื˜ืึทืœ, ื ื™ื˜-ืจื™ืจื™ื™ื˜ืึทื‘ืึทืœ ื–ื›ึผืจื•ืŸ (ืงื™ื™ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืื•ืคึฟืŸ ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜) ืžื™ื˜ ื“ื™ ืึธื ื”ื™ื™ื‘ ืงืึธื“, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ ื“ื™ RSA ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ, ื•ื•ืึธืก ื•ื•ืขืจืึทืคื™ื™ื– ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ื“ื™ Intel ME ืคื™ืจืžื•ื•ืึทืจืข;
  • ืึทืขืก ืฉืœื™ืกืœ ืคึฟืึทืจ ืกื˜ืึธืจื™ื ื’ ืกื•ื“ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข;
  • ืึทืงืกืขืก ืฆื• ืึท ื’ืึทื ื’ ืคื•ืŸ ืคื•ืกืขืก (ืคืคืฃ, ืคื™ืขืœื“ ืคึผืจืึธื’ืจืึทืžืžืึทื‘ืœืข ืคื•ืกืขืก) ื™ื ืึทื’ืจื™ื™ื˜ื™ื“ ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืคึฟืึทืจ ืฉื˜ืขื ื“ื™ืง ืกื˜ืึธืจื™ื“ื–ืฉ ืคื•ืŸ ืขื˜ืœืขื›ืข ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ื“ื•ืจืš ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืกื™ืกื˜ืขื ืคืึทืจืงื•ื™ืคืขืจ.

Intel Boot Guard 1.x

ื ืงืœื™ื™ืŸ ืึธืคึผืœื™ื™ืงืขื ื•ื ื’. ื“ื™ ื™ื ื˜ืขืœ ื‘ืึธืึธื˜ ื’ืึทืจื“ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื•ื•ืขืจืกื™ืข ื ื•ืžืขืจืŸ ื•ื•ืึธืก ืžื™ืจ ื ื•ืฆืŸ ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ ื–ืขื ืขืŸ ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืื•ืŸ ืงืขืŸ ื”ืึธื‘ืŸ ื’ืึธืจื ื™ืฉื˜ ืฆื• ื˜ืึธืŸ ืžื™ื˜ ื“ื™ ื ื•ืžืขืจื™ื ื’ ื’ืขื ื™ืฆื˜ ืื™ืŸ ื™ื ื˜ืขืœ ืก ื™ื ืขืจืœืขืš ื“ืึทืงื™ื•ืžืขื ื˜ื™ื™ืฉืึทืŸ. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ื“ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ืึธ ื•ื•ืขื’ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื™ื– ื‘ืืงื•ืžืขืŸ ื‘ืขืฉืึทืก ืคืึทืจืงืขืจื˜ ื™ื ื–ืฉืขื ื™ืขืจื™ืข, ืื•ืŸ ืงืขืŸ ืึทื ื˜ื”ืึทืœื˜ืŸ ื™ื ืึทืงื™ืขืจืึทืกื™ื– ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ื“ื™ ืกืคึผืขืกืึทืคืึทืงื™ื™ืฉืึทื ื– ืคึฟืึทืจ Intel Boot Guard, ื•ื•ืึธืก ืื™ื– ืึทื ืœื™ื™ืงืœื™ ืฆื• ื–ื™ื™ืŸ ืืจื•ื™ืก.

ืึทื–ื•ื™, Intel Boot Guard (BG) ืื™ื– ืึท ื™ื™ึทื–ื ื•ื•ืึทืจื’-ื’ืขืฉื˜ื™ืฆื˜ UEFI ื‘ื™ื™ืึธื•ืก ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ื˜ืขื›ื ืึธืœืึธื’ื™ืข. ืื•ื™ื‘ ืžืฉืคื˜ืŸ ืœื•ื™ื˜ ื–ื™ื™ืŸ ืงื•ืจืฅ ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ืื™ืŸ ื“ืขื ื‘ื•ืš [ืคึผืœืึทื˜ืคืึธืจื ืขืžื‘ืขื“ื™ื“ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื’ื™ืœื•ื™, ืงืึทืคึผื™ื˜ืœ ืฉื˜ื™ื•ื•ืœ ืžื™ื˜ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜, ืึธื“ืขืจ ื ื™ื˜ ืฉื˜ื™ื•ื•ืœ], ืขืก ืึทืจื‘ืขื˜ ื•ื•ื™ ืึท ื˜ืจืึทืกื˜ื™ื“ ืฉื˜ื™ื•ื•ืœ ืงื™ื™ื˜. ืื•ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ืœื™ื ืง ืื™ืŸ ืขืก ืื™ื– ื“ื™ ืฉื˜ื™ื•ื•ืœ ืงืึธื“ (ืžื™ืงืจืึธืงืึธื“ืข) ื™ืŸ ื“ื™ ืงืคึผื•, ื•ื•ืึธืก ืื™ื– ื˜ืจื™ื’ืขืจื“ ื“ื•ืจืš ื“ื™ RESET ื’ืขืฉืขืขื ื™ืฉ (ื ื™ื˜ ืฆื• ื–ื™ื™ืŸ ืฆืขืžื™ืฉื˜ ืžื™ื˜ ื“ื™ RESET ื•ื•ืขืงื˜ืึธืจ ืื™ืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก!). ื“ื™ ืงืคึผื• ื’ืขืคื™ื ื˜ ืึท ืงืึธื“ ืžืึธื“ื•ืœืข ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืื•ืŸ ื’ืขื—ืชืžืขื˜ ื“ื•ืจืš Intel (Intel BG ืกื˜ืึทืจื˜ืึทืคึผ ACM) ืื•ื™ืฃ ื“ื™ SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ, ืœืึธื•ื“ื– ืขืก ืื™ืŸ ื–ื™ื™ืŸ ืงืึทืฉ, ื•ื•ืขืจืึทืคื™ื™ื– (ืขืก ืื™ื– ืฉื•ื™ืŸ ื‘ืืžืขืจืงื˜ ืื•ื™ื‘ืŸ ืึทื– ื“ื™ ืงืคึผื• ื”ืื˜ ืึท ื”ืึทืฉ ืคื•ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœ ื•ื•ืึธืก ื•ื•ืขืจืึทืคื™ื™ื– ื“ื™ ACM ื›ืกื™ืžืข) ืื•ืŸ ืœืึธื ื˜ืฉื™ื–.

Schrรถdinger's Trusted Download. Intel Boot Guard

ื“ืขืจ ืงืึธื“ ืžืึธื“ื•ืœืข ืื™ื– ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ืึท ืงืœื™ื™ืŸ ืกื˜ืึทืจื˜ื™ื ื’ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ UEFI BIOS - Initial Boot Block (IBB), ื•ื•ืึธืก, ืื™ืŸ ืงืขืจ, ื›ึผื•ืœืœ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืคึฟืึทืจ ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ื“ื™ ื”ื•ื™ืคึผื˜ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก. ืื–ื•ื™, Intel BG ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก ืื™ื™ื“ืขืจ ืœืึธื•ื“ื™ื ื’ ื“ื™ ืึทืก (ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ืื•ื ื˜ืขืจ ื“ื™ ื”ืฉื’ื—ื” ืคื•ืŸ ื–ื™ื›ืขืจ ื‘ืึธืึธื˜ ื˜ืขื›ื ืึธืœืึธื’ื™ืข).

Intel BG ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื’ื™ื˜ ืฆื•ื•ื™ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืžืึธื“ืขืก (ืื•ืŸ ืื™ื™ื ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ืึทืจื™ื™ึทื ืžื™ืฉื  ื–ื™ืš ืžื™ื˜ ื“ื™ ืื ื“ืขืจืข, ื“"ื” ื‘ื™ื™ื“ืข ืžืึธื“ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืขื ื™ื™ื‘ืึทืœื“ ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขื, ืึธื“ืขืจ ื‘ื™ื™ื“ืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคืึทืจืงืจื™ืคึผืœื˜).

ื’ืขืžืืกื˜ืŸ ืฉื˜ื™ื•ื•ืœ

ืื™ืŸ ื’ืขืžืืกื˜ืŸ ืฉื˜ื™ื•ื•ืœ (MB) ืžืึธื“ืข, ื™ืขื“ืขืจ ืฉื˜ื™ื•ื•ืœ ืงืึธืžืคึผืึธื ืขื ื˜ (ืกื˜ืึทืจื˜ื™ื ื’ ืžื™ื˜ ื“ื™ ืงืคึผื• ืฉื˜ื™ื•ื•ืœ ืจืึทื) "ืžื™ื˜ืœืขืŸ" ื“ื™ ื•ื•ื™ื™ึทื˜ืขืจ ืžื™ื˜ ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ื™ TPM (ื˜ืจืึทืกื˜ืขื“ ืคึผืœืึทื˜ืคืึธืจื ืžืึธื“ื•ืœืข). ืคึฟืึทืจ ื“ื™ ื•ื•ืืก ื–ืขื ืขืŸ ื ื™ืฉื˜ ืื™ืŸ ื“ืขืจ ื•ื•ื™ืกืŸ, ืœืึธื–ืŸ ืžื™ืจ ื“ืขืจืงืœืขืจืŸ.

ื˜ืคึผื ื”ืื˜ ืคึผืงืจืก (ืคึผืœืึทื˜ืคืึธืจื ืงืึธื ืคื™ื’ื•ืจืึทื˜ื™ืึธืŸ ืจืขื“ื–ืฉื™ืกื˜ืขืจืก), ืื™ืŸ ื•ื•ืึธืก ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ื™ ื›ืึทืฉื™ื ื’ ืึธืคึผืขืจืึทืฆื™ืข ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืœื•ื™ื˜ ื“ื™ ืคืึธืจืžื•ืœืข:

Schrรถdinger's Trusted Download. Intel Boot Guard

ื™ืขื ืข. ื“ื™ ืงืจืึทื ื˜ ืคึผืงืจ ื•ื•ืขืจื˜ ื“ืขืคึผืขื ื“ืก ืื•ื™ืฃ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข, ืื•ืŸ ื“ื™ ืจืขื“ื–ืฉื™ืกื˜ืขืจื– ื–ืขื ืขืŸ ื‘ืึทืฉื˜ืขื˜ื™ืง ื‘ืœื•ื™ื– ื•ื•ืขืŸ ื“ื™ ืกื™ืกื˜ืขื ืื™ื– ื‘ืึทืฉื˜ืขื˜ื™ืง.

ืื–ื•ื™, ืื™ืŸ MB ืžืึธื“ืข, ืื™ืŸ ืขื˜ืœืขื›ืข ืคื•ื ื˜ ืื™ืŸ ืฆื™ื™ื˜, PCRs ืคืึทืจื˜ืจืึทื›ื˜ื  ื–ื™ืš ืึท ื™ื™ื ืฆื™ืง (ืื™ืŸ ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ื™ ื›ืึทืฉื™ื ื’ ืึธืคึผืขืจืึทืฆื™ืข) ื™ื“ืขื ื˜ื™ืคื™ืขืจ ืคื•ืŸ ื“ื™ ืงืึธื“ ืึธื“ืขืจ ื“ืึทื˜ืŸ ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ "ื’ืขืžืืกื˜ืŸ." PCR ื•ื•ืึทืœื•ืขืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ืขื˜ืœืขื›ืข ื“ืึทื˜ืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ (TPM_Seal) ืึธืคึผืขืจืึทืฆื™ืข. ื ืึธืš ื“ืขื, ื–ื™ื™ืขืจ ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ (TPM_Unseal) ื•ื•ืขื˜ ื–ื™ื™ืŸ ืžืขื’ืœืขืš ื‘ืœื•ื™ื– ืื•ื™ื‘ ื“ื™ ืคึผืงืจ ื•ื•ืึทืœื•ืขืก ื”ืึธื‘ืŸ ื ื™ืฉื˜ ื˜ื•ื™ืฉืŸ ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืœืึธื•ื“ื™ื ื’ (ื“"ื”, ืงื™ื™ืŸ ืื™ื™ืŸ "ื’ืขืžืืกื˜ืŸ" ืงืึธืžืคึผืึธื ืขื ื˜ ืื™ื– ื’ืขื•ื•ืขืŸ ืžืึทื“ืึทืคื™ื™ื“).

ื•ื•ืขืจืึทืคื™ื™ื“ ืฉื˜ื™ื•ื•ืœ

ื“ื™ ืขืจื’ืกื˜ ื–ืึทืš ืคึฟืึทืจ ื“ื™ ื•ื•ืืก ื•ื•ื™ ืฆื• ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ืื™ื– ื“ื™ ื•ื•ืขืจื™ืคื™ืขื“ ืฉื˜ื™ื•ื•ืœ (VB) ืžืึธื“ืข, ืื™ืŸ ื•ื•ืึธืก ื™ืขื“ืขืจ ืฉื˜ื™ื•ื•ืœ ืงืึธืžืคึผืึธื ืขื ื˜ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืงืึทืœืœื™ ื•ื•ืขืจืึทืคื™ื™ื– ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืื•ืŸ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืื™ื™ื ืขืจ. ืื•ืŸ ืื™ืŸ ืคืึทืœ ืคื•ืŸ ืึท ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ื˜ืขื•ืช, (ืื™ื™ื ืขืจ ืคื•ืŸ) ื›ืึทืคึผืึทื ื–:

  • ืฉืึทื˜ื“ืึทื•ืŸ ื“ื•ืจืš ื˜ื™ื™ืžืึทื•ื˜ ืคื•ืŸ 1 ืžื™ื ื•ื˜ ืฆื• 30 ืžื™ื ื•ื˜ (ืึทื–ื•ื™ ืึทื– ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื”ืื˜ ืฆื™ื™ึทื˜ ืฆื• ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ืึธืก ื–ื™ื™ืŸ ืงืึธืžืคึผื™ื•ื˜ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ืฉื˜ื™ื•ื•ืœ, ืื•ืŸ, ืื•ื™ื‘ ืžืขื’ืœืขืš, ืคืจื•ื•ื•ื˜ ืฆื• ื•ืžืงืขืจืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก);
  • ื‘ืึทืœื“ื™ืง ืฉืึทื˜ื“ืึทื•ืŸ (ืึทื–ื•ื™ ืึทื– ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ื”ืื˜ ื ื™ืฉื˜ ื”ืึธื‘ืŸ ืฆื™ื™ึทื˜ ืฆื• ืคึฟืึทืจืฉื˜ื™ื™ืŸ, ืคื™ืœ ื•ื•ื™ื™ื ื™ืงืขืจ ื˜ืึธืŸ ืขืคึผืขืก);
  • ืคืึธืจื–ืขืฆืŸ ืฆื• ืึทืจื‘ืขื˜ืŸ ืžื™ื˜ ืึท ืจื•ื™ืง ืื•ื™ืกื“ืจื•ืง (ืึทื– ืคืึทืœ ื•ื•ืขืŸ ืขืก ืื™ื– ืงื™ื™ืŸ ืฆื™ื™ื˜ ืคึฟืึทืจ ื–ื™ื›ืขืจืงื™ื™ึทื˜, ื•ื•ื™ื™ึทืœ ืขืก ื–ืขื ืขืŸ ืžืขืจ ื•ื•ื™ื›ื˜ื™ืง ื–ืื›ืŸ ืฆื• ื˜ืึธืŸ).

ื“ื™ ื‘ืจื™ืจื” ืคื•ืŸ ืงืึทืžืฃ ื“ืขืคึผืขื ื“ืก ืื•ื™ืฃ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ (ื ื™ื™ืžืœื™ ืื•ื™ืฃ ื“ื™ ืึทื–ื•ื™ ื’ืขืจื•ืคืขื ืข ืขื ืคืึธืจืกืžืึทื ื˜ ืคึผืึธืœื™ื˜ื™ืง), ื•ื•ืึธืก ืื™ื– ืคึผืขืจืžืึทื ืึทื ื˜ืœื™ ืจืขืงืึธืจื“ืขื“ ื“ื•ืจืš ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืคืึทืจืงื•ื™ืคืขืจ ืื™ืŸ ืึท ืกืคึผืขืฉืœื™ ื“ื™ื–ื™ื™ื ื“ ืกื˜ืึธืจื™ื“ื–ืฉ - ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก (ืคืคืฃ). ืžื™ืจ ื•ื•ืขืœืŸ ื•ื•ื•ื™ื ืขืŸ ืื•ื™ืฃ ื“ืขื ืคื•ื ื˜ ืื™ืŸ ืžืขืจ ื“ืขื˜ืึทืœ ืฉืคึผืขื˜ืขืจ.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ื“ืขืจ ืคืึทืจืงื•ื™ืคืขืจ ื“ื–ืฉืขื ืขืจื™ื™ืฅ ืฆื•ื•ื™ื™ RSA 2048 ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืงืจื™ื™ื™ืฅ ืฆื•ื•ื™ื™ ื“ืึทื˜ืŸ ืกื˜ืจืึทืงื˜ืฉืขืจื– (ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ ื“ื™ ืคื™ื’ื•ืจ):

  1. ื“ื™ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืžืึทื ืึทืคืขืกื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ (KEYM, OEM Root Key Manifest), ื•ื•ืึธืก ื›ึผื•ืœืœ ื“ื™ SVN (ืกืขืงื•ืจื™ื˜ื™ ื•ื•ืขืจืกื™ืข ื ื•ืžืขืจ) ืคื•ืŸ ื“ืขื ืžืึทื ื™ืคืขืกื˜ืึธ, ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ ื“ื™ ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ ืคื•ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ืžืึทื ื™ืคืขืกื˜ืึธ, ื“ื™ RSA ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ (ื“"ื” ื“ืขืจ ืฆื™ื‘ื•ืจ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืžืึทื ื™ืคืขืกื˜ืึธื•). ืคืึทืจืงื•ื™ืคืขืจ ืก ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ) ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ืžืึทื ื™ืคืขืกื˜ืึธ ืื•ืŸ ื“ื™ ื›ืกื™ืžืข ื–ื™ืš;
  2. IBB Manifest (IBBM, Initial Boot Block Manifest), ื•ื•ืึธืก ื›ึผื•ืœืœ ื“ื™ SVN ืคื•ืŸ ื“ืขื ืžืึทื ื™ืคืขืกื˜, ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ IBB, ื“ืขืจ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœ ืคึฟืึทืจ ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ืžืึทื ื™ืคืขืกื˜ ืื•ืŸ ื“ื™ ื›ืกื™ืžืข ื–ื™ืš.

ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ ื“ื™ ืึธืขื ื•ื•ืึธืจืฆืœ ืงื™ื™ ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ ืื™ื– ืคึผืขืจืžืึทื ืึทื ื˜ืœื™ ืจืขืงืึธืจื“ืขื“ ืื™ืŸ ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก (FPFs), ืคึผื•ื ืงื˜ ื•ื•ื™ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ืื•ื™ื‘ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื’ื™ื˜ ื“ื™ ื™ื ืงืœื•ื–ืฉืึทืŸ ืคื•ืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข, ืคึฟื•ืŸ ืื™ืฆื˜ ืื•ื™ืฃ ื‘ืœื•ื™ื– ื“ื™ ื‘ืึทื–ื™ืฆืขืจ ืคื•ืŸ ื“ื™ ืคึผืจื™ื•ื•ืึทื˜ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ืึธืขื ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืงืขื ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก ืื•ื™ืฃ ื“ืขื ืกื™ืกื˜ืขื (ื“"ื” ืงืขื ืขืŸ ืจื™ืงืึทืœืงื™ืึทืœื™ื™ื˜ ื“ื™ ืžืึทื ื™ืคืขืกืฅ), ื“"ื”. ืคืึทืจืงื•ื™ืคืขืจ.

Schrรถdinger's Trusted Download. Intel Boot Guard

ื•ื•ืขืŸ ืื™ืจ ืงื•ืง ืื™ืŸ ื“ื™ ื‘ื™ืœื“, ืžื™ื“ ืื•ื™ืคืฉื˜ื™ื™ืŸ ืกืคืงื•ืช ื•ื•ืขื’ืŸ ื“ื™ ื ื•ื™ื˜ ืคึฟืึทืจ ืึทื–ืึท ืึท ืœืึทื ื’ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืงื™ื™ื˜ - ื–ื™ื™ ืงืขืŸ ื”ืึธื‘ืŸ ื’ืขื ื™ืฆื˜ ืื™ื™ืŸ ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš. ืคืืจื•ื•ืืก ืงืึธืžืคึผืœื™ืฆื™ืจืŸ ื–ืื›ืŸ?

ืื™ืŸ ืคืึทืงื˜, ื™ื ื˜ืขืœ ื’ื™ื˜ ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ ื“ื™ ื’ืขืœืขื’ื ื”ื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ืคืึทืจืฉื™ื“ืขื ืข IBB ืฉืœื™ืกืœืขืŸ ืคึฟืึทืจ ืคืึทืจืฉื™ื“ืขื ืข ืฉื•ืจื•ืช ืคื•ืŸ ื–ื™ื™ึทืŸ ืคึผืจืึธื“ื•ืงื˜ืŸ ืื•ืŸ ืื™ื™ื ืขืจ ื•ื•ื™ ื“ืขืจ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ. ืื•ื™ื‘ ื“ื™ ืคึผืจื™ื•ื•ืึทื˜ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ IBB ืฉืœื™ืกืœ (ืžื™ื˜ ื•ื•ืึธืก ื“ื™ ืจื’ืข ืžืึทื ืึทืคืขืกื˜ื™ื™ืฉืึทืŸ ืื™ื– ื’ืขื—ืชืžืขื˜) ืœื™ืงืก, ื“ืขืจ ืื™ื ืฆื™ื“ืขื ื˜ ื•ื•ืขื˜ ื•ื•ื™ืจืงืŸ ื‘ืœื•ื™ื– ืื™ื™ืŸ ืคึผืจืึธื“ื•ืงื˜ ืฉื•ืจื” ืื•ืŸ ื‘ืœื•ื™ื– ื‘ื™ื– ื“ืขืจ ืคืึทืจืงื•ื™ืคืขืจ ื“ื–ืฉืขื ืขืจื™ื™ืฅ ืึท ื ื™ื™ึทืข ืคึผืึธืจ ืื•ืŸ ื™ื ืงืœื•ื“ื– ื“ื™ ืจื™ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ืžืึทื ืึทืคืขืกื˜ื™ื™ืฉืึทื ื– ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื‘ื™ื™ืึธื•ืก ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ.

ืึธื‘ืขืจ ืื•ื™ื‘ ื“ืขืจ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ (ืžื™ื˜ ื•ื•ืึธืก ื“ืขืจ ืขืจืฉื˜ืขืจ ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš ืื™ื– ื’ืขื—ืชืžืขื˜) ืื™ื– ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“, ืขืก ืื™ื– ื ื™ื˜ ืžืขื’ืœืขืš ืฆื• ืคืึทืจื‘ื™ื™ึทื˜ืŸ ืขืก; ืขืก ืื™ื– ืงื™ื™ืŸ ืจืขื•ื•ืึธืงืึทื˜ื™ืึธืŸ ืคึผืจืึธืฆืขื“ื•ืจ. ื“ื™ ื”ืึทืฉ ืคื•ืŸ ื“ืขื ืฆื™ื‘ื•ืจ ื˜ื™ื™ืœ ืคื•ืŸ ื“ืขื ืฉืœื™ืกืœ ืื™ื– ืคึผืจืึธื•ื’ืจืึทืžื“ ืื™ืŸ FPF ืึทืžืึธืœ ืื•ืŸ ืคึฟืึทืจ ืึทืœืข.

ื™ื ื˜ืขืœ ื‘ืึธืึธื˜ ื’ืึทืจื“ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ

ืื™ืฆื˜ ืœืึธื–ืŸ ืื•ื ื“ื– ื ืขืžืขืŸ ืึท ื ืขืขื ื˜ืขืจ ืงื•ืง ืื™ืŸ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื•ืŸ ื“ืขืจ ืคึผืจืึธืฆืขืก ืคื•ืŸ ืงืจื™ื™ื™ื˜ื™ื ื’ ืขืก. ืื•ื™ื‘ ืื™ืจ ืงื•ืง ืื™ืŸ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืงื•ื•ื™ื˜ืœ ืื™ืŸ ื“ื™ GUI ืคื•ืŸ ื“ื™ ืคืœืึทืฉ ื‘ื™ืœื“ ื˜ื•ืœ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ Intel System Tool Kit (STK), ืื™ืจ ื•ื•ืขื˜ ื‘ืึทืžืขืจืงืŸ ืึทื– ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื›ื•ืœืœ ืึท ื”ืึทืฉ ืคื•ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืคื•ืŸ ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ, ืึท ืคึผืึธืจ ืคื•ืŸ ืื•ืžืงืœืืจืข ื•ื•ืขืจื˜ืŸ ื•ื›ื•'. Intel BG ืคึผืจืึธืคื™ืœ.

Schrรถdinger's Trusted Download. Intel Boot Guard

ื“ื™ ืกื˜ืจื•ืงื˜ื•ืจ ืคื•ืŸ ื“ืขื ืคึผืจืึธืคื™ืœ:

typedef struct BG_PROFILE
{
	unsigned long Force_Boot_Guard_ACM : 1;
	unsigned long Verified_Boot : 1;
	unsigned long Measured_Boot : 1;
	unsigned long Protect_BIOS_Environment : 1;
	unsigned long Enforcement_Policy : 2; // 00b โ€“ do nothing
                                              // 01b โ€“ shutdown with timeout
                                              // 11b โ€“ immediate shutdown
	unsigned long : 26;
};

ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ื– ืึท ื–ื™ื™ืขืจ ืคืœืขืงืกืึทื‘ืึทืœ ืขื ื˜ื™ื˜ื™. ื‘ืึทื˜ืจืึทื›ื˜ืŸ, ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื™ Force_Boot_Guard_ACM ืคืึธืŸ. ื•ื•ืขืŸ ืขืก ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ, ืื•ื™ื‘ ื“ื™ BG ืกื˜ืึทืจื˜ืึทืคึผ ืึทืงื ืžืึธื“ื•ืœืข ืื•ื™ืฃ ื“ื™ SPI ื‘ืœื™ืฅ ืื™ื– ื ื™ืฉื˜ ื’ืขืคึฟื•ื ืขืŸ, ืงื™ื™ืŸ ื˜ืจืึทืกื˜ื™ื“ ืฉื˜ื™ื•ื•ืœ ื•ื•ืขื˜ ืคึผืึทืกื™ืจืŸ. ื–ื™ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทื ื˜ืจืึทืกื˜.

ืžื™ืจ ืฉื•ื™ืŸ ื’ืขืฉืจื™ื‘ืŸ ืื•ื™ื‘ืŸ ืึทื– ื“ื™ ืขื ืคืึธืจืกืžืึทื ื˜ ืคึผืึธืœื™ื˜ื™ืง ืคึฟืึทืจ VB ืžืึธื“ืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ืงืึทื ืคื™ื’ื™ืขืจื“ ืึทื–ื•ื™ ืึทื– ืื•ื™ื‘ ืขืก ืื™ื– ืึท ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ื˜ืขื•ืช, ืึทืŸ ืึทื ื˜ืจืึทืกื˜ื™ื“ ืืจืืคืงืืคื™ืข ื•ื•ืขื˜ ืคึผืึทืกื™ืจืŸ.

ืœืึธื–ืŸ ืึทื–ืึท ื–ืื›ืŸ ืื™ืŸ ื“ื™ ื“ื™ืกืงืจืขืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืขื ื“ืึธืจืก ...

ื“ื™ GUI ื ื•ืฆืŸ ื’ื™ื˜ ื“ื™ ืคืืœื’ืขื ื“ืข "ืคืึทืจื˜ื™ืง" ืคึผืจืึธื•ืคื™ื™ืœื–:

ื ื•ืž
ืžืึธื“ืข
ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’

0
No_FVME
Intel BG ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืคืึทืจืงืจื™ืคึผืœื˜

1
VE
ื•ื•ื‘ ืžืึธื“ืข ืื™ื– ืขื ื™ื™ื‘ืึทืœื“, ืฉืึทื˜ื“ืึทื•ืŸ ื“ื•ืจืš ื˜ื™ื™ืžืึทื•ื˜

2
VME
ื‘ื™ื™ื“ืข ืžืึธื“ืขืก ื–ืขื ืขืŸ ืขื ื™ื™ื‘ืึทืœื“ (VB ืื•ืŸ MB), ืฉืึทื˜ื“ืึทื•ืŸ ื“ื•ืจืš ื˜ื™ื™ืžืึทื•ื˜

3
VM
ื‘ื™ื™ื“ืข ืžืึธื“ืขืก ื–ืขื ืขืŸ ืขื ื™ื™ื‘ืึทืœื“, ืึธืŸ ืื•ื™ืกื’ืขื“ืจื™ื™ื˜ ืึทื•ื•ืขืง ื“ื™ ืกื™ืกื˜ืขื

4
FVE
ื•ื•ื‘ ืžืึธื“ืข ืขื ื™ื™ื‘ืึทืœื“, ื‘ืึทืœื“ื™ืง ืฉืึทื˜ื“ืึทื•ืŸ

5
FVME
ื‘ื™ื™ื“ืข ืžืึธื“ืขืก ืขื ื™ื™ื‘ืึทืœื“, ื‘ืึทืœื“ื™ืง ืฉืึทื˜ื“ืึทื•ืŸ

ื•ื•ื™ ืฉื•ื™ืŸ ื“ืขืจืžืื ื˜, ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืžื•ื–ืŸ ื–ื™ื™ืŸ ื’ืขืฉืจื™ื‘ืŸ ืึทืžืึธืœ ืื•ืŸ ืคึฟืึทืจ ืึทืœืข ื“ื•ืจืš ื“ื™ ืกื™ืกื˜ืขื ืคืึทืจืงื•ื™ืคืขืจ ืื™ืŸ ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก (FPFs) - ืึท ืงืœื™ื™ืŸ (ืœื•ื™ื˜ ืฆื• ืึทื ื•ื•ืขืจืึทืคื™ื™ื“ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข, ื‘ืœื•ื™ื– 256 ื‘ื™ื˜ืขืก) ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืกื˜ืึธืจื™ื“ื–ืฉ ืคื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืคึผืจืึธื•ื’ืจืึทืžื“. ืึทืจื•ื™ืก ื™ื ื˜ืขืœ ืก ืคึผืจืึธื“ื•ืงืฆื™ืข ืคืึทืกื™ืœืึทื˜ื™ื– (ืึทื– ืก ื•ื•ืึธืก ืคึผื•ื ืงื˜ ืคืขืœื“ ืคึผืจืึธื’ืจืึทืžืžืึทื‘ืœืข ืคื•ืกืขืก).

ืขืก ืื™ื– ื’ืจื•ื™ืก ืคึฟืึทืจ ืกื˜ืึธืจื™ื ื’ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื•ื•ื™ื™ึทืœ:

  • ื”ืื˜ ืึท ืื™ื™ืŸ-ืฆื™ื™ึทื˜ ืคึผืจืึธื’ืจืึทืžืžืึทื‘ืœืข ื’ืขื’ื ื˜ ืคึฟืึทืจ ืกื˜ืึธืจื™ื ื’ ื“ืึทื˜ืŸ (ืคึผื•ื ืงื˜ ื•ื•ื• ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ื– ื’ืขืฉืจื™ื‘ืŸ);
  • ื‘ืœื•ื™ื– Intel ME ืงืขื ืขืŸ ืœื™ื™ืขื ืขืŸ ืื•ืŸ ืคึผืจืึธื’ืจืึทื ืขืก.

ืึทื–ื•ื™, ืื™ืŸ ืกื“ืจ ืฆื• ืฉื˜ืขืœืŸ ื“ื™ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืคึฟืึทืจ Intel BG ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื•ื™ืฃ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืกื™ืกื˜ืขื, ื“ืขืจ ืคืึทืจืงื•ื™ืคืขืจ ื˜ื•ื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ื‘ืขืฉืึทืก ืคึผืจืึธื“ื•ืงืฆื™ืข:

  1. ื ื™ืฆืŸ ื“ื™ Flash Image Tool ื ื•ืฆืŸ (ืคื•ืŸ Intel STK), ืขืก ืงืจื™ื™ื™ืฅ ืึท ืคื™ืจืžื•ื•ืึทืจืข ื‘ื™ืœื“ ืžื™ื˜ ืึท ื’ืขื’ืขื‘ืŸ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืื™ืŸ ื“ื™ Intel ME ื’ืขื’ื ื˜ (ื“ื™ ืึทื–ื•ื™ ื’ืขืจื•ืคืขื ืข ืฆื™ื™ึทื˜ื•ื•ื™ื™ึทืœื™ืง ืฉืคึผื™ื’ืœ ืคึฟืึทืจ FPFs);
  2. ื ื™ืฆืŸ ื“ื™ ืคืœืึทืฉ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ื˜ื•ืœ ื ื•ืฆืŸ (ืคึฟื•ืŸ Intel STK), ืขืก ืฉืจื™ื™ื‘ื˜ ื“ืขื ื‘ื™ืœื“ ืฆื• ื“ื™ SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขื ืื•ืŸ ืงืœืึธื•ื–ื™ื– ื“ื™ ืึทื–ื•ื™ ื’ืขืจื•ืคืขื ืข. ืžืึทื ื•ืคืึทืงื˜ื•ืจื™ื ื’ ืžืึธื“ืข (ืื™ืŸ ื“ืขื ืคืึทืœ, ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ื‘ืึทืคึฟืขืœ ืื™ื– ื’ืขืฉื™ืงื˜ ืฆื• Intel ME).

ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื“ื™ ืึทืคึผืขืจื™ื™ืฉืึทื ื–, Intel ME ื•ื•ืขื˜ ื™ื‘ืขืจื’ืขื‘ืŸ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ื•ื•ืึทืœื•ืขืก ืคื•ืŸ ื“ืขืจ ืฉืคึผื™ื’ืœ ืคึฟืึทืจ FPFs ืื™ืŸ ื“ื™ ME ื’ืขื’ื ื˜ ืฆื• FPFs, ืฉื˜ืขืœืŸ ื“ื™ ืจืขื–ืึทืœื•ืฉืึทื ื– ืื™ืŸ SPI ื‘ืœื™ืฅ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ืฆื• ื“ื™ ื•ื•ืึทืœื•ืขืก ืจืขืงืึทืžืขื ื“ื™ื“ ื“ื•ืจืš Intel (ื“ื™ืกืงืจื™ื™ื‘ื“ ืื™ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘ ืคื•ืŸ ื“ื™ ืึทืจื˜ื™ืงืœ) ืื•ืŸ ื“ื•ืจื›ืคื™ืจืŸ ืึท ืกื™ืกื˜ืขื ื‘ืึทืฉื˜ืขื˜ื™ืง.

ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ Intel Boot Guard

ืื™ืŸ ืกื“ืจ ืฆื• ืึทื ืึทืœื™ื™ื– ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืžื™ืจ ืึธืคึผื’ืขืฉื˜ืขืœื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ืกื™ืกื˜ืขืžืขืŸ ืคึฟืึทืจ ื˜ืจืึทืกืขืก ืคื•ืŸ Intel BG ื˜ืขื›ื ืึธืœืึธื’ื™ืข:

ืกื™ืกื˜ืขื
ื˜ืึธืŸ

ื’ื™ื’ืื‘ื™ื™ื˜ GA-H170-D3H
Skylake, ืขืก ืื™ื– ืฉื˜ื™ืฆืŸ

ื’ื™ื’ืื‘ื™ื™ื˜ GA-Q170-D3H
Skylake, ืขืก ืื™ื– ืฉื˜ื™ืฆืŸ

ื’ื™ื’ืื‘ื™ื™ื˜ GA-B150-HD3
Skylake, ืขืก ืื™ื– ืฉื˜ื™ืฆืŸ

MSI H170A Gaming Pro
Skylake, ืงื™ื™ืŸ ืฉื˜ื™ืฆืŸ

Lenovo ื˜ื™ื ื’ืงืคึผืึทื“ 460
Skylake, ื’ืขืฉื˜ื™ืฆื˜, ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืขื ื™ื™ื‘ืึทืœื“

Lenovo ื™ืึธื’ืึท 2 Pro
ื”ืึทืกื•ื•ืขืœ, ืงื™ื™ืŸ ืฉื˜ื™ืฆืŸ

Lenovo U330p
ื”ืึทืกื•ื•ืขืœ, ืงื™ื™ืŸ ืฉื˜ื™ืฆืŸ

ืžื™ื˜ "ืฉื˜ื™ืฆืŸ" ืžื™ืจ ืžื™ื™ื ืขืŸ ื“ื™ ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ื“ื™ Intel BG ืกื˜ืึทืจื˜ืึทืคึผ ืึทืงื ืžืึธื“ื•ืœืข, ื“ื™ ืžืึทื ืึทืคืขืกืฅ ื“ืขืจืžืื ื˜ ืื•ื™ื‘ืŸ ืื•ืŸ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืงืึธื“ ืื™ืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก, ื™.ืข. ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคึฟืึทืจ ืึทื ืึทืœื™ืกื™ืก.

ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ, ืœืึธื–ืŸ ืื•ื ื“ื– ื ืขืžืขืŸ ื“ื™ ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ืคื•ืŸ ื“ื™ ืึธืคื™ืก. ืคืึทืจืงื•ื™ืคืขืจ ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื‘ื™ืœื“ ืคื•ืŸ SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืคึฟืึทืจ Gigabyte GA-H170-D3H (ื•ื•ืขืจืกื™ืข F4).

ื™ื ื˜ืขืœ ืงืคึผื• ืฉื˜ื™ื•ื•ืœ ืจืึทื

ืขืจืฉื˜ืขืจ ืคื•ืŸ ืึทืœืข, ืœืึธื–ืŸ ืก ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื“ื™ ืึทืงืฉืึทื ื– ืคื•ืŸ ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืื•ื™ื‘ Intel BG ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื™ื– ืขื ื™ื™ื‘ืึทืœื“.

ืขืก ืื™ื– ื ื™ื˜ ืžืขื’ืœืขืš ืฆื• ื’ืขืคึฟื™ื ืขืŸ ืกืึทืžืคึผืึทืœื– ืคื•ืŸ ื“ืขืงืจื™ืคึผื˜ื™ื“ ืžื™ืงืจืึธืงืึธื“ืข, ืึทื–ื•ื™ ื•ื•ื™ ื“ื™ ืึทืงืฉืึทื ื– ื“ื™ืกืงืจื™ื™ื‘ื“ ืื•ื ื˜ืŸ ื–ืขื ืขืŸ ื™ืžืคึผืœืึทืžืขื ืึทื“ (ืื™ืŸ ืžื™ืงืจืึธืงืึธื“ืข ืึธื“ืขืจ ื™ื™ึทื–ื ื•ื•ืึทืจื’) ืื™ื– ืึทืŸ ืึธืคึฟืŸ ืงืฉื™ื. ืึธื‘ืขืจ, ืขืก ืื™ื– ืึท ืคืึทืงื˜ ืึทื– ืžืึธื“ืขืจืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– "ืงืขื ืขืŸ" ื“ื•ืจื›ืคื™ืจืŸ ื“ื™ ืึทืงืฉืึทื ื–.

ื ืึธืš ืึทืจื•ื™ืกื’ืึทื ื’ ื“ื™ RESET ืฉื˜ืึทื˜, ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ (ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืื™ื– ืฉื•ื™ืŸ ืžืึทืคึผื˜ ืื™ืŸ ื“ื™ ืึทื“ืจืขืก ืคึผืœืึทืฅ) ื’ืขืคื™ื ื˜ ื“ื™ FIT (Firmware Interface Table) ื˜ื™ืฉ. ืขืก ืื™ื– ื’ืจื™ื ื’ ืฆื• ื’ืขืคึฟื™ื ืขืŸ; ื“ืขืจ ื˜ื™ื™ึทื˜ืœ ืฆื• ืขืก ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืึทื“ืจืขืก FFFF FFC0h.

Schrรถdinger's Trusted Download. Intel Boot Guard
ืื™ืŸ ื“ืขื ื‘ื™ื™ึทืฉืคึผื™ืœ ืื•ื ื˜ืขืจ ื‘ืึทื˜ืจืึทื›ื˜ื•ื ื’, ื“ื™ ื•ื•ืขืจื˜ FFD6 9500h ืื™ื– ืœื™ื’ืŸ ืื™ืŸ ื“ืขื ืึทื“ืจืขืก. ื“ื•ืจืš ืึทืงืกืขืก ื“ืขื ืึทื“ืจืขืก, ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ ื–ืขื˜ ื“ื™ FIT ื˜ื™ืฉ, ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื•ื•ืึธืก ืื™ื– ืฆืขื˜ื™ื™ืœื˜ ืื™ืŸ ืจืขืงืึธืจื“ืก. ื“ืขืจ ืขืจืฉื˜ืขืจ ืคึผืึธื–ื™ืฆื™ืข ืื™ื– ื“ื™ ื›ืขื“ืขืจ ืคื•ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืกื˜ืจื•ืงื˜ื•ืจ:

typedef struct FIT_HEADER
{
	char           Tag[8];     // โ€˜_FIT_   โ€™
	unsigned long  NumEntries; // including FIT header entry
	unsigned short Version;    // 1.0
	unsigned char  EntryType;  // 0
	unsigned char  Checksum;
};

Schrรถdinger's Trusted Download. Intel Boot Guard
ืคึฟืึทืจ ืขื˜ืœืขื›ืข ืื•ืžื‘ืึทืงืึทื ื˜ ืกื™ื‘ื”, ื“ื™ ื˜ืฉืขืงืงืกื•ื ืื™ื– ื ื™ื˜ ืฉื˜ืขื ื“ื™ืง ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ืื™ืŸ ื“ื™ ื˜ื™ืฉืŸ (ื“ื™ ืคืขืœื“ ืื™ื– ืœื™ื ืงืก ื ื•ืœ).

ื“ื™ ืื™ื‘ืขืจื™ืงืข ืื™ื™ื ืกืŸ ื•ื•ื™ื™ื–ืŸ ืื•ื™ืฃ ืคืืจืฉื™ื“ืขื ืข ื‘ื™ื™ื ืขืจื™ืขืก ื•ื•ืืก ื“ืืจืคืŸ ื–ื™ื™ืŸ ืคืืจืฉื˜ืขืœื˜/ืื•ื™ืกื’ืขืคื™ืจื˜ ืื™ื™ื“ืขืจ ื“ื™ ื‘ื™ื™ืึธื•ืก ืื™ื– ืขืงืกืึทืงื™ื•ื˜ืึทื“, ื“.ื”. ืื™ื™ื“ืขืจ ืื™ืจ ื‘ืึทืฉื˜ื™ืžืขืŸ ืฆื• ื“ื™ ืœืขื’ืึทื˜ ืจืขืกืขื˜ ื•ื•ืขืงื˜ืึธืจ (FFFF FFF0h). ื“ื™ ืกื˜ืจื•ืงื˜ื•ืจ ืคื•ืŸ ื™ืขื“ืขืจ ืึทื–ืึท ืคึผืึธื–ื™ืฆื™ืข ืื™ื– ื•ื•ื™ ื’ื™ื™ื˜:

typedef struct FIT_ENTRY
{
	unsigned long  BaseAddress;
	unsigned long  : 32;
	unsigned long  Size;
	unsigned short Version;     // 1.0
	unsigned char  EntryType;
	unsigned char  Checksum;
};

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ื™ EntryType ืคืขืœื“ ื“ืขืจืฆื™ื™ืœื˜ ืื™ืจ ื“ืขื ื˜ื™ืคึผ ืคื•ืŸ ื‘ืœืึธืง ื“ืขื ืคึผืึธื–ื™ืฆื™ืข ื•ื•ื™ื™ื–ื˜ ืฆื•. ืžื™ืจ ื•ื•ื™ืกืŸ ืขื˜ืœืขื›ืข ื˜ื™ื™ืคึผืก:

enum FIT_ENTRY_TYPES
{
	FIT_HEADER = 0,
	MICROCODE_UPDATE,
	BG_ACM,
	BIOS_INIT = 7,
	TPM_POLICY,
	BIOS_POLICY,
	TXT_POLICY,
	BG_KEYM,
	BG_IBBM
};

ืื™ืฆื˜ ืขืก ืื™ื– ืงืœืึธืจ ื•ื•ื™ ื“ืขืจ ื˜ืึธื’ ืึทื– ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ืื™ื™ื ืกืŸ ื•ื•ื™ื™ื–ื˜ ืฆื• ื“ื™ ืึธืจื˜ ืคื•ืŸ ื“ื™ Intel BG ืกื˜ืึทืจื˜ืึทืคึผ ืึทืงื ื‘ื™ื™ื ืขืจื™. ื“ื™ ื›ืขื“ืขืจ ืกื˜ืจื•ืงื˜ื•ืจ ืคื•ืŸ ื“ืขื ื‘ื™ื™ื ืขืจื™ ืื™ื– ื˜ื™ืคึผื™ืฉ ืคึฟืึทืจ ืงืึธื“ ืžืึทื“ื–ืฉื•ืœื– ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš Intel (ACMS, ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ, Intel ME ืงืึธื“ ืกืขืงืฉืึทื ื–, ...).

typedef struct BG_ACM_HEADER
{
	unsigned short ModuleType;     // 2
	unsigned short ModuleSubType;  // 3
	unsigned long  HeaderLength;   // in dwords
	unsigned long  : 32;
	unsigned long  : 32;
	unsigned long  ModuleVendor;   // 8086h
	unsigned long  Date;           // in BCD format
	unsigned long  TotalSize;      // in dwords
	unsigned long  unknown1[6];
	unsigned long  EntryPoint;
	unsigned long  unknown2[16];
	unsigned long  RsaKeySize;     // in dwords
	unsigned long  ScratchSize;    // in dwords
	unsigned char  RsaPubMod[256];
	unsigned long  RsaPubExp;
	unsigned char  RsaSig[256];
};

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ ืœืึธื•ื“ื– ื“ืขื ื‘ื™ื™ื ืขืจื™ ืื™ืŸ ื–ื™ื™ืŸ ืงืึทืฉ, ื•ื•ืขืจืึทืคื™ื™ื– ืขืก ืื•ืŸ ืœื•ื™ืคื˜ ืขืก.

Intel BG ืกื˜ืึทืจื˜ืึทืคึผ ืึทืงื

ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืึทื ืึทืœื™ื™ื–ื™ื ื’ ื“ื™ ืึทืจื‘ืขื˜ ืคื•ืŸ ื“ืขื ACM, ืขืก ืื™ื– ื’ืขื•ื•ืืจืŸ ืงืœืึธืจ ืึทื– ืขืก ื˜ื•ื˜ ื“ื™ ืคืืœื’ืขื ื“ืข:

  • ื‘ืืงื•ืžื˜ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืคื•ืŸ Intel ME, ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก (FPFs);
  • ื’ืขืคื™ื ื˜ KEYM ืื•ืŸ IBBM ืžืึทื ื™ืคืขืกืฅ ืื•ืŸ ื•ื•ืขืจืึทืคื™ื™ื– ื–ื™ื™.

ืฆื• ื’ืขืคึฟื™ื ืขืŸ ื“ื™ ืžืึทื ื™ืคืขืกืฅ, ACM ืื•ื™ืš ื ื™ืฆื˜ ื“ื™ FIT ื˜ื™ืฉ, ื•ื•ืึธืก ื”ืื˜ ืฆื•ื•ื™ื™ ืคึผืึธื–ื™ืฆื™ืข ื˜ื™ื™ืคึผืก ืฆื• ืึธื ื•ื•ื™ื™ึทื–ืŸ ืกื˜ืจื•ืงื˜ื•ืจ ื“ืึทื˜ืŸ (ื–ืขืŸ FIT_ENTRY_TYPES ืื•ื™ื‘ืŸ).

ืœืึธืžื™ืจ ื ืขืžืขืŸ ืึท ื ืขืขื ื˜ืขืจ ืงื•ืง ืื™ืŸ ืžืึทื ื™ืคืขืกื˜ืึธืก. ืื™ืŸ ื“ืขืจ ืกื˜ืจื•ืงื˜ื•ืจ ืคื•ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš, ืžื™ืจ ื–ืขืŸ ืขื˜ืœืขื›ืข ื“ื™ืง ืงืึทื ืกื˜ืึทื ืฅ, ืึท ื”ืึทืฉ ืคื•ืŸ ื“ื™ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœ ืคื•ืŸ ื“ื™ ืจื’ืข ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš, ืื•ืŸ ื“ืขืจ ืฆื™ื‘ื•ืจ ืึธืขื ื•ื•ืึธืจืฆืœ ืงื™ื™ ื’ืขื—ืชืžืขื˜ ื•ื•ื™ ืึท ื ืขืกื˜ืขื“ ืกื˜ืจื•ืงื˜ื•ืจ:

typedef struct KEY_MANIFEST
{
	char           Tag[8];          // โ€˜__KEYM__โ€™
	unsigned char  : 8;             // 10h
	unsigned char  : 8;             // 10h
	unsigned char  : 8;             // 0
	unsigned char  : 8;             // 1
	unsigned short : 16;            // 0Bh
	unsigned short : 16;            // 20h == hash size?
	unsigned char  IbbmKeyHash[32]; // SHA256 of an IBBM public key
	BG_RSA_ENTRY   OemRootKey;
};

typedef struct BG_RSA_ENTRY
{
	unsigned char  : 8;             // 10h
	unsigned short : 16;            // 1
	unsigned char  : 8;             // 10h
	unsigned short RsaPubKeySize;   // 800h
	unsigned long  RsaPubExp;
	unsigned char  RsaPubKey[256];
	unsigned short : 16;            // 14
	unsigned char  : 8;             // 10h
	unsigned short RsaSigSize;      // 800h
	unsigned short : 16;            // 0Bh
	unsigned char  RsaSig[256];
};

Schrรถdinger's Trusted Download. Intel Boot Guard
ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ืึธืขื ื•ื•ืึธืจืฆืœ ืงื™ื™ ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ, ืžื™ืจ ืฆื•ืจื™ืงืจื•ืคืŸ ืึทื– ืžื™ืจ ื ื•ืฆืŸ ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ ืคื•ืกืขืก, ื•ื•ืึธืก ืื™ืŸ ื“ืขื ืคื•ื ื˜ ืื™ื– ืฉื•ื™ืŸ ื‘ืืงื•ืžืขืŸ ืคื•ืŸ Intel ME.

ืœืึธืžื™ืจ ื’ืฒืŸ ืฐืฒึทื˜ืขืจ ืฆื•ื ืฆืฐืฒื˜ืŸ ืžืึทื ื™ืคืขืกื˜ืึธ. ืขืก ื‘ืืฉื˜ื™ื™ื˜ ืคื•ืŸ ื“ืจื™ื™ึท ืกื˜ืจืึทืงื˜ืฉืขืจื–:

typedef struct IBB_MANIFEST
{
	ACBP Acbp;         // Boot policies
	IBBS Ibbs;         // IBB description
	IBB_DESCRIPTORS[];
	PMSG Pmsg;         // IBBM signature
};

ื“ืขืจ ืขืจืฉื˜ืขืจ ื›ึผื•ืœืœ ืขื˜ืœืขื›ืข ืงืึทื ืกื˜ืึทื ืฅ:

typedef struct ACBP
{
	char           Tag[8];          // โ€˜__ACBP__โ€™
	unsigned char  : 8;             // 10h
	unsigned char  : 8;             // 1
	unsigned char  : 8;             // 10h
	unsigned char  : 8;             // 0
	unsigned short : 16;            // x & F0h = 0
	unsigned short : 16;            // 0 < x <= 400h
};

ื“ื™ ืจื’ืข ื›ึผื•ืœืœ ื“ื™ SHA256 ื”ืึทืฉ ืคื•ืŸ ื“ื™ IBB ืื•ืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ื•ื•ืึธืก ื‘ืึทืฉืจื™ื™ึทื‘ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ IBB (ื“"ื”, ื•ื•ืึธืก ื“ื™ ื”ืึทืฉ ืื™ื– ืงืึทืœืงื™ืึทืœื™ื™ื˜ื™ื“ ืคื•ืŸ):

typedef struct IBBS
{
	char           Tag[8];            // โ€˜__IBBS__โ€™
	unsigned char  : 8;               // 10h
	unsigned char  : 8;               // 0
	unsigned char  : 8;               // 0
	unsigned char  : 8;               // x <= 0Fh
	unsigned long  : 32;              // x & FFFFFFF8h = 0
	unsigned long  Unknown[20];
	unsigned short : 16;              // 0Bh
	unsigned short : 16;              // 20h == hash size ?
	unsigned char  IbbHash[32];       // SHA256 of an IBB
	unsigned char  NumIbbDescriptors;
};

ื“ื™ IBB ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ื ืึธื›ื’ื™ื™ืŸ ื“ืขื ืกื˜ืจื•ืงื˜ื•ืจ, ืื™ื™ื ืขืจ ื ืึธืš ื“ื™ ืื ื“ืขืจืข. ื–ื™ื™ืขืจ ืื™ื ื”ืึทืœื˜ ื”ืื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ืคึฟืึธืจืžืึทื˜:

typedef struct IBB_DESCRIPTOR
{
	unsigned long  : 32;
	unsigned long  BaseAddress;
	unsigned long  Size;
};

ืขืก ืื™ื– ืคึผืฉื•ื˜: ื™ืขื“ืขืจ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจ ื›ึผื•ืœืœ ื“ื™ ืึทื“ืจืขืก / ื’ืจื™ื™ืก ืคื•ืŸ ื“ื™ IBB ืคึผื™ื™ึทื“ืข. ืื–ื•ื™, ื“ื™ ืงืึทื ืงืึทื˜ืึทื ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื‘ืœืึทืงืก ืฉืคึผื™ืฆื™ืง ืฆื• ื“ื•ืจืš ื“ื™ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก (ืื™ืŸ ื“ืขืจ ืกื“ืจ ืคื•ืŸ ื“ื™ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ื–ื™ืš) ืื™ื– ื™ื‘ื‘. ืื•ืŸ, ื•ื•ื™ ืึท ื”ืขืจืฉืŸ, IBB ืื™ื– ื“ื™ ื–ืึทืžืœื•ื ื’ ืคื•ืŸ ืึทืœืข ืžืึทื“ื–ืฉื•ืœื– ืคื•ืŸ ื“ื™ SEC ืื•ืŸ PEI ืคืึทืกืขืก.

ื“ื™ ืฆื•ื•ื™ื™ื˜ืข ืžืึทื ืึทืคืขืกื˜ื™ื™ืฉืึทืŸ ืื™ื– ื’ืขืขื ื“ื™ืงื˜ ื“ื•ืจืš ืึท ืกื˜ืจื•ืงื˜ื•ืจ ืžื™ื˜ ื“ื™ IBB ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœ (ื•ื•ืขืจืึทืคื™ื™ื“ ื“ื•ืจืš ื“ื™ SHA256 ื”ืึทืฉ ืคึฟื•ืŸ ื“ืขืจ ืขืจืฉื˜ืขืจ ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš) ืื•ืŸ ื“ื™ ื›ืกื™ืžืข ืคื•ืŸ โ€‹โ€‹ื“ืขื ื‘ืึทืฉื™ื™ึทืžืคึผืขืจืœืขืš:

typedef struct PMSG
{
	char           Tag[8];            // โ€˜__PMSG__โ€™
	unsigned char  : 8;               // 10h
	BG_RSA_ENTRY   IbbKey;
};

Schrรถdinger's Trusted Download. Intel Boot Guard
ืึทื–ื•ื™, ืืคื™ืœื• ืื™ื™ื“ืขืจ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ืกื˜ืึทืจืฅ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’, ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ ื•ื•ืขื˜ ืงืึทื˜ืขืจ ACM, ื•ื•ืึธืก ื•ื•ืขื˜ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ืกืขืงืฉืึทื ื– ืžื™ื˜ ื“ื™ SEC ืื•ืŸ PEI ืคืึทืกืข ืงืึธื“. ื“ืขืจื ืึธืš, ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ ื™ืงืกื™ื“ื– ACM, ื’ื™ื™ื˜ ื“ื™ RESET ื•ื•ืขืงื˜ืึธืจ ืื•ืŸ ื”ื™ื™ื‘ื˜ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก.

ื“ื™ ื•ื•ืขืจืึทืคื™ื™ื“ PEI ืฆืขื˜ื™ื™ืœื•ื ื’ ืžื•ื–ืŸ ืึทื ื˜ื”ืึทืœื˜ืŸ ืึท ืžืึธื“ื•ืœืข ื•ื•ืึธืก ื•ื•ืขื˜ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืจืขืฉื˜ ืคื•ืŸ ื“ื™ ื‘ื™ื™ืึธื•ืก (DXE ืงืึธื“). ื“ืขืจ ืžืึธื“ื•ืœืข ืื™ื– ืฉื•ื™ืŸ ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš IBV (ื™ื ื“ืขืคึผืขื ื“ืขื ื˜ ื‘ื™ื™ืึธื•ืก ืคืึทืจืงื•ื™ืคืขืจ) ืึธื“ืขืจ ื“ื™ ืกื™ืกื˜ืขื ืคืึทืจืงื•ื™ืคืขืจ ื–ื™ืš. ื•ื•ื™ื™ึทืœ ื‘ืœื•ื™ื– Lenovo ืื•ืŸ Gigabyte ืกื™ืกื˜ืขืžืขืŸ ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ืื™ืŸ ืื•ื ื“ื–ืขืจ ื‘ืึทื–ื™ื™ึทื˜ื™ืงื•ื ื’ ืื•ืŸ ื”ืึธื‘ืŸ ื™ื ื˜ืขืœ ื‘ื’ ืฉื˜ื™ืฆืŸ; ืœืึธืžื™ืจ ืงื•ืงืŸ ืื™ืŸ ื“ื™ ืงืึธื“ ื™ืงืกื˜ืจืึทืงื˜ื™ื“ ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขืžืขืŸ.

UEFI ื‘ื™ื™ืึธื•ืก ืžืึธื“ื•ืœืข LenovoVerifiedBootPei

ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ Lenovo, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื“ื™ LenovoVerifiedBootPei ืžืึธื“ื•ืœืข {B9F2AC77-54C7-4075-B42E-C36325A9468D}, ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš Lenovo.

ื–ื™ื™ืŸ ืึทืจื‘ืขื˜ ืื™ื– ืฆื• ืงื•ืงืŸ ืึทืจื•ื™ืฃ (ื“ื•ืจืš GUID) ื“ื™ ื”ืึทืฉ ื˜ื™ืฉ ืคึฟืึทืจ ื“ื™ DXE ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ DXE.

if (EFI_PEI_SERVICES->GetBootMode() != BOOT_ON_S3_RESUME)
{
	if (!FindHashTable())
		return EFI_NOT_FOUND;
	if (!VerifyDxe())
		return EFI_SECURITY_VIOLATION;
}

ะฅะตัˆ ั‚ะฐะฑะปะธั†ะฐ {389CC6F2-1EA8-467B-AB8A-78E769AE2A15} ะธะผะตะตั‚ ัะปะตะดัƒัŽั‰ะธะน ั„ะพั€ะผะฐั‚:

typedef struct HASH_TABLE
{
	char          Tag[8];            // โ€˜$HASHTBLโ€™
	unsigned long NumDxeDescriptors;
	DXE_DESCRIPTORS[];
};

typedef struct DXE_DESCRIPTOR
{
	unsigned char BlockHash[32];     // SHA256
	unsigned long Offset;
	unsigned long Size;
};

UEFI ื‘ื™ื™ืึธื•ืก ืžืึธื“ื•ืœืข BootGuardPei

ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ ื’ื™ื’ืื‘ื™ื™ื˜, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื“ื™ BootGuardPei ืžืึธื“ื•ืœืข {B41956E1-7CA2-42DB-9562-168389F0F066}, ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš AMI, ื“ืขืจื™ื‘ืขืจ, ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ืงื™ื™ืŸ ืึทืžื™ ื‘ื™ื™ืึธื•ืก ืžื™ื˜ Intel BG ืฉื˜ื™ืฆืŸ.

ื–ื™ื™ืŸ ืึทืคึผืขืจื™ื™ื˜ื™ื ื’ ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ืขืคึผืขืก ืึทื ื“ืขืจืฉ, ืึธื‘ืขืจ, ืขืก ื‘ื•ื™ืœื– ืึทืจืึธืคึผ ืฆื• ื“ื™ ื–ืขืœื‘ืข ื–ืึทืš:

int bootMode = EFI_PEI_SERVICES->GetBootMode();

if (bootMode != BOOT_ON_S3_RESUME &&
    bootMode != BOOT_ON_FLASH_UPDATE &&
    bootMode != BOOT_IN_RECOVERY_MODE)
{
	HOB* h = CreateHob();
	if (!FindHashTable())
		return EFI_NOT_FOUND;
	WriteHob(&h, VerifyDxe());
	return h;
}

ื“ื™ ื”ืึทืฉ ื˜ื™ืฉ {389CC6F2-1EA8-467B-AB8A-78E769AE2A15} ืขืก ืื™ื– ืงื•ืงืŸ ืคึฟืึทืจ ื”ืื˜ ื“ื™ ืคืืœื’ืขื ื“ืข ืคึฟืึธืจืžืึทื˜:

typedef HASH_TABLE DXE_DESCRIPTORS[];

typedef struct DXE_DESCRIPTOR
{
	unsigned char BlockHash[32];     // SHA256
	unsigned long BaseAddress;
	unsigned long Size;
};

Intel Boot Guard 2.x

ื–ืืœ ืก ื‘ืขืงื™ืฆืขืจ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ืืŸ ืื ื“ืขืจ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ Intel Boot Guard, ื•ื•ืึธืก ืื™ื– ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ืึท ื ื™ื™ึทืขืจ ืกื™ืกื˜ืขื ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ Intel SoC ืžื™ื˜ Apollo Lake ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข - ASRock J4205-IT.

ื›ืึธื˜ืฉ ื“ื™ ื•ื•ืขืจืกื™ืข ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื‘ืœื•ื™ื– ืื™ืŸ ืกืึธืงืก (ื ื™ื™ึท ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ ืงืึทื‘ื™ ืœื™ื™ืง ืคึผืจืึทืกืขืกืขืจ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข ืคืึธืจื–ืขืฆืŸ ืฆื• ื ื•ืฆืŸ Intel Boot Guard 1.x), ืขืก ืื™ื– ืคื•ืŸ ื’ืจื•ื™ืก ืื™ื ื˜ืขืจืขืก ืฆื• ืœืขืจื ืขืŸ ื“ื™ ื ื™ื™ึทืข ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ ืึธืคึผืฆื™ืข ืคึฟืึทืจ Intel SoC ืคึผืœืึทื˜ืคืึธืจืžืก, ื•ื•ืึธืก ื”ืึธื‘ืŸ ื’ืขื–ืขืŸ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืขื ื“ืขืจื•ื ื’ืขืŸ, ืœืžืฉืœ:

  • ื“ื™ ื‘ื™ื™ืึธื•ืก ืื•ืŸ Intel ME ืžืงื•ืžื•ืช (ืึธื“ืขืจ ื’ืึทื ืฅ Intel TXE, ืœื•ื™ื˜ ื“ื™ ื˜ืขืจืžื™ื ืึธืœืึธื’ื™ืข ืคึฟืึทืจ Intel SoC) ื–ืขื ืขืŸ ืื™ืฆื˜ ืื™ื™ืŸ IFWI ื’ืขื’ื ื˜;
  • ื›ืึธื˜ืฉ Intel BG ืื™ื– ื’ืขื•ื•ืขืŸ ืขื ื™ื™ื‘ืึทืœื“ ืื•ื™ืฃ ื“ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข, ืกื˜ืจืึทืงื˜ืฉืขืจื– ืึทื–ืึท ื•ื•ื™ FIT, KEYM, IBBM ื–ืขื ืขืŸ ื ื™ืฉื˜ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ;
  • ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื“ื™ TXE ืื•ืŸ ISH ืงืึธืจืขืก (ืงืก86), ืึท ื“ืจื™ื˜ ื”ืึทืจืฅ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ (ืึทืจืง ื•ื•ื™ื“ืขืจ, ื“ื•ืจืš ื“ืขื ื•ื•ืขื’) - PMC (Power Management Controller), ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื™ื ืฉื•ืจื™ื ื’ ื“ื™ ืึธืคึผืขืจืึทื‘ื™ืœื™ื˜ื™ ืคื•ืŸ ื“ื™ ืžืึทื›ื˜ ืกืึทื‘ืกื™ืกื˜ืึทื ืื•ืŸ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืžืึธื ื™ื˜ืึธืจื™ื ื’.

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ืขืจ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ื ื™ื™ึทืข IFWI ื’ืขื’ื ื˜ ืื™ื– ืึท ืกื›ื•ื ืคื•ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืžืึทื“ื–ืฉื•ืœื–:

ืคืึธืจื•ืจื˜ื™ื™ืœ
ื ืึธืžืขืŸ
ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’

0000 2000 ื”
SMIP
ืึท ื–ื™ื›ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ, ื’ืขื—ืชืžืขื˜ ื“ื•ืจืš ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ

0000 6000 ื”
RBEP
Intel TXE ืคื™ืจืžื•ื•ืึทืจืข ืงืึธื“ ืึธืคึผื˜ื™ื™ืœื•ื ื’, x86, ื’ืขื—ืชืžืขื˜ Intel

0001 0000 ื”
PMCP
Intel PMC ืคื™ืจืžื•ื•ืึทืจืข ืงืึธื“ ืึธืคึผื˜ื™ื™ืœื•ื ื’, ARC, ื’ืขื—ืชืžืขื˜ Intel

0002 0000 ื”
FTPR
Intel TXE ืคื™ืจืžื•ื•ืึทืจืข ืงืึธื“ ืึธืคึผื˜ื™ื™ืœื•ื ื’, x86, ื’ืขื—ืชืžืขื˜ Intel

0007 ื‘ 000 ื”
UCOD
ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคึฟืึทืจ ืงืคึผื•, ื’ืขื—ืชืžืขื˜ ื“ื•ืจืš ื™ื ื˜ืขืœ

0008 0000 ื”
ื™ื‘ื‘ืคึผ
UEFI BIOS, SEC/PEI ืคืึทืกืขืก, x86, ื’ืขื—ืชืžืขื˜ ื“ื•ืจืš ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ

0021 8000 ื”
ISHC
Intel ISH ืคื™ืจืžื•ื•ืึทืจืข ืงืึธื“ ืึธืคึผื˜ื™ื™ืœื•ื ื’, x86, ื’ืขื—ืชืžืขื˜ ื“ื•ืจืš ื“ื™ ืคืึทืจืงื•ื™ืคืขืจ

0025 8000 ื”
ื ืคื˜ืคึผ
Intel TXE ืคื™ืจืžื•ื•ืึทืจืข ืงืึธื“ ืึธืคึผื˜ื™ื™ืœื•ื ื’, x86, ื’ืขื—ืชืžืขื˜ Intel

0036 1000 ื”
IUNP
ืื™ื– ืื•ืžื‘ืึทืงืึทื ื˜

0038 1000 ื”
OBBP
UEFI BIOS, DXE Phase, x86, ืึทื ืกื™ื™ื ื“

ื‘ืขืฉืึทืก ื“ื™ ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ ื“ื™ TXE ืคื™ืจืžื•ื•ืึทืจืข, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ืงืœืึธืจ ื•ื•ื™ ื“ืขืจ ื˜ืึธื’ ืึทื– ื ืึธืš ืึท RESET, ื“ื™ TXE ื”ืืœื˜ ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืื™ืŸ ื“ืขื ืฉื˜ืึทื˜ ื‘ื™ื– ืขืก ืคึผืจื™ืคึผืขืจื– ื“ื™ ื™ืงืขืจื“ื™ืง ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ืึทื“ืจืขืก ืคึผืœืึทืฅ ืคึฟืึทืจ ื“ื™ ืงืคึผื• (FIT, ACM, RESET ื•ื•ืขืงื˜ืึธืจ ...). ื“ืขืจืฆื•, TXE ืœื™ื™ื’ื˜ ื“ื™ ื“ืึทื˜ืŸ ืื™ืŸ ื–ื™ื™ืŸ SRAM, ื ืึธืš ื•ื•ืึธืก ืขืก ื˜ืขืžืคึผืขืจืขืจืึทืœื™ ื’ื™ื˜ ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืึทืงืกืขืก ื“ืึธืจื˜ ืื•ืŸ "ืจื™ืœื™ืกื™ื–" ืขืก ืคึฟื•ืŸ RESET.

ืื•ื™ืฃ ื”ื™ื˜ืŸ ืงืขื’ืŸ ืจืึธืึธื˜ืงื™ืฅ

ื ื•, ืื™ืฆื˜ ืœืึธื–ืŸ ืก ืžืึทืš ืื•ื™ืฃ ืฆื• ื“ื™ "ื”ื™ื™ืก" ืฉื˜ืึธืคึผืŸ. ืžื™ืจ ืึทืžืึธืœ ื“ื™ืกืงืึทื•ื•ืขืจื“ ืึทื– ืื•ื™ืฃ ืคื™ืœืข ืกื™ืกื˜ืขืžืขืŸ, SPI ื‘ืœื™ืฅ ื“ื™ืกืงืจื™ืคึผื˜ืึธืจืก ืึทื ื˜ื”ืึทืœื˜ืŸ ืคึผืขืจืžื™ืฉืึทื ื– ืฆื• ืึทืงืกืขืก ืžืงื•ืžื•ืช ืคื•ืŸ SPI ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ืึทื–ื•ื™ ืึทื– ืึทืœืข ื ื™ืฆืขืจืก ืคื•ืŸ ื“ืขื ื–ื›ึผืจื•ืŸ ืงืขื ืขืŸ ืฉืจื™ื™ึทื‘ืŸ ืื•ืŸ ืœื™ื™ืขื ืขืŸ ืงื™ื™ืŸ ื’ืขื’ื ื˜. ื™ืขื ืข. ืงื™ื™ืŸ ื•ื•ืขื’.

ื ืึธืš ืงืึธื ื˜ืจืึธืœื™ืจื•ื ื’ ืžื™ื˜ ื“ื™ MEinfo ื ื•ืฆืŸ (ืคึฟื•ืŸ Intel STK), ืžื™ืจ ื’ืขื–ืขืŸ ืึทื– ื“ื™ ืžืึทื ื•ืคืึทืงื˜ื•ืจื™ื ื’ ืžืึธื“ืข ืื•ื™ืฃ ื“ื™ ืกื™ืกื˜ืขืžืขืŸ ืื™ื– ื ื™ืฉื˜ ืคึฟืึทืจืžืึทื›ื˜, ื“ืขืจื™ื‘ืขืจ, ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก (ืคืคืฃ) ื–ืขื ืขืŸ ืœื™ื ืงืก ืื™ืŸ ืึท ืึทื ื“ื™ืคื™ื™ื ื“ ืฉื˜ืึทื˜. ื™ืึธ, Intel BG ืื™ื– ื ื™ื˜ ืื•ื™ืกื’ืขื“ืจื™ื™ื˜ ืื•ื™ืฃ ืื“ืขืจ ืึทื•ื•ืขืง ืื™ืŸ ืึทื–ืึท ืงืึทืกืขืก.

ืžื™ืจ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืกื™ืกื˜ืขืžืขืŸ (ืžื™ื˜ ื’ืจื•ืก ืฆื• Intel BG ืื•ืŸ ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื™ืกืงืจื™ื™ื‘ื“ ืฉืคึผืขื˜ืขืจ ืื™ืŸ ื“ืขื ืึทืจื˜ื™ืงืœ, ืžื™ืจ ื•ื•ืขืœืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ Haswell ืคึผืจืึทืกืขืกืขืจ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข ืื•ืŸ ื”ืขื›ืขืจ):

  • ืึทืœืข ื’ื™ื’ืื‘ื™ื™ื˜ ืคึผืจืึธื“ื•ืงื˜ืŸ;
  • ืึทืœืข ืžืกื™ ืคึผืจืึธื“ื•ืงื˜ืŸ;
  • 21 ืžืึธื“ืขืœืก ืคื•ืŸ ืœืขื ืึธื•ื•ืึธ ืœืึทืคึผื˜ืึทืคึผืก ืื•ืŸ 4 ืžืึธื“ืขืœืก ืคื•ืŸ ืœืขื ืึธื•ื•ืึธ ืกืขืจื•ื•ืขืจืก.

ืคื•ืŸ ืงื•ืจืก, ืžื™ืจ ื’ืขืžืืœื“ืŸ ื“ื™ ื•ืคื“ืขืงื•ื ื’ ืฆื• ื“ื™ ื•ื•ืขื ื“ืึธืจืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืฆื• Intel.

ื ื˜ื•ื™ื’ืŸ ืจืขืืงืฆื™ืข ืื™ื– ื’ืขืงื•ืžืขืŸ ื‘ืœื•ื™ื– ืคื•ืŸ ืœืขื ืึธื•ื•ืึธื•ื•ืขืจ ื“ืขืจืงืขื ื˜ ื“ื™ ืคึผืจืึธื‘ืœืขื ืื•ืŸ ืืจื•ื™ืก ื ืคืื˜ืฉ.

ื’ื™ื’ืึทื‘ื™ื™ื˜ ื–ื™ื™ ืกื™ืžื“ ืฆื• ืึธื ื ืขืžืขืŸ ื“ื™ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืึธื‘ืขืจ ื ื™ืฉื˜ ืงืึทืžืขื ื˜ืึทื“ ืื™ืŸ ืงื™ื™ืŸ ื•ื•ืขื’.

ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืžื™ื˜ ืžืกื™ ื’ืึธืจ ืกื˜ืึธืœื“ ืื•ื™ืฃ ืื•ื ื“ื–ืขืจ ื‘ืงืฉื” ืฆื• ืฉื™ืงืŸ ื“ื™ื™ืŸ ืขืคื ื˜ืœืขืš PGP ืฉืœื™ืกืœ (ืฆื• ืฉื™ืงืŸ ื–ื™ื™ ืึท ื–ื™ื›ืขืจื”ื™ื™ื˜ ืึทื“ื•ื•ื™ื™ื–ืขืจื™ ืื™ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืคืึธืจืขื). ื–ื™ื™ ืกื˜ื™ื™ื˜ื™ื“ ืึทื– ื–ื™ื™ "ื–ืขื ืขืŸ ืึท ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืคืึทื‘ืจื™ืงืึทื ื˜ ืื•ืŸ ื˜ืึธืŸ ื ื™ื˜ ืคึผืจืึธื“ื•ืฆื™ืจืŸ ืคึผื’ืคึผ ืฉืœื™ืกืœืขืŸ."

ืื‘ืขืจ ืœืืžื™ืจ ืื ืงื•ืžืขืŸ ืฆื• ื“ื™ ื ืงื•ื“ื”. ื–ื™ื ื˜ ื“ื™ ืคื•ืกืขืก ื–ืขื ืขืŸ ืœื™ื ืงืก ืื™ืŸ ืึทืŸ ื•ื ืกืคึผืขืกื™ืคื™ืขื“ ืฉื˜ืึทื˜, ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ (ืึธื“ืขืจ ืึทื˜ืึทืงืขืจ) ืงืขื ืขืŸ ืคึผืจืึธื’ืจืึทื ื–ื™ื™ ื™ื ื“ื™ืคึผืขื ื“ืึทื ื˜ืœื™ (ื“ื™ ืžืขืจืกื˜ ืฉื•ื•ืขืจ ื–ืึทืš ืื™ื– ื’ืขืคึฟื™ื ืขืŸ Intel STK). ืฆื• ื˜ืึธืŸ ื“ืึธืก, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืคืึทืจืขื ื“ื™ืงืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืกื˜ืขืคึผืก.

1. ืฉื˜ื™ื•ื•ืœ ืืจื™ื™ืŸ ืื™ืŸ ื“ื™ ืืคืขืจื™ืจืŸ ืกื™ืกื˜ืขื Windows (ืื™ืŸ ืืœื’ืขืžื™ื™ืŸ, ื“ื™ ืืงืฆื™ืขืก ื•ื•ืืก ื•ื•ืขืจืŸ ื‘ืืฉืจื™ื‘ืŸ ืื•ื ื˜ืŸ ืงืขื ืขืŸ ื’ืขื˜ืืŸ ื•ื•ืขืจืŸ ืคื•ืŸ ืื•ื ื˜ืขืจ Linux(ืื•ื™ื‘ ืื™ืจ ืึทื ื˜ื•ื•ื™ืงืœื˜ ืึทืŸ Intel STK ืึทื ืึทืœืึธื’ ืคึฟืึทืจ ื“ื™ ื’ืขื•ื•ืื•ื ื˜ืฉืข ืึธืคึผืขืจื™ืจืŸ ืกื™ืกื˜ืขื). ื ื™ืฆื ื“ื™ืง ื“ื™ MEinfo ื™ื•ื˜ื™ืœื™ื˜ื™, ื–ืึธืจื’ื˜ ืึทื– ื“ื™ ืคื™ื•ื–ืขืก ืื•ื™ืฃ ื“ืขืจ ื’ืขื’ืขื‘ืขื ืขืจ ืกื™ืกื˜ืขื ื–ืขื ืขืŸ ื ื™ืฉื˜ ืคึผืจืึธื’ืจืึทืžื™ืจื˜.

Schrรถdinger's Trusted Download. Intel Boot Guard
2. ืœื™ื™ืขื ืขืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ื ื™ืฆืŸ ื“ื™ ืคืœืึทืฉ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ื˜ื•ืœ.

Schrรถdinger's Trusted Download. Intel Boot Guard
3. ืขืคึฟืขื ืขืŸ ื“ื™ ืœื™ื™ืขื ืขืŸ ื‘ื™ืœื“ ืžื™ื˜ ืงื™ื™ืŸ UEFI ื‘ื™ื™ืึธื•ืก ืขื“ื™ื˜ื™ื ื’ ื’ืขืฆื™ื™ึทื’, ืžืึทื›ืŸ ื“ื™ ื ื™ื™ื˜ื™ืง ืขื ื“ืขืจื•ื ื’ืขืŸ (ื‘ืึทืคื™ืจืŸ ืึท ืจืึธืึธื˜ืงื™ื˜, ืœืžืฉืœ), ืฉืึทืคึฟืŸ / ืจืขื“ืึทื’ื™ืจืŸ ื™ื’ื–ื™ืกื˜ื™ื ื’ KEYM ืื•ืŸ IBBM ืกื˜ืจืึทืงื˜ืฉืขืจื– ืื™ืŸ ื“ื™ ืžื™ืจ ื’ืขื’ื ื˜.

Schrรถdinger's Trusted Download. Intel Boot Guard
Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ื™ ื‘ื™ืœื“ ื›ื™ื™ืœื™ื™ืฅ ื“ื™ ืขืคื ื˜ืœืขืš ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ RSA ืฉืœื™ืกืœ, ื“ื™ ื”ืึทืฉ ืคื•ืŸ ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคึผืจืึธื•ื’ืจืึทืžื“ ืื™ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืคื•ืกืขืก ืฆื•ื–ืืžืขืŸ ืžื™ื˜ ื“ื™ ืจืขืฉื˜ ืคื•ืŸ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ.

4. ื ื™ืฆืŸ ื“ื™ ืคืœืึทืฉ ื‘ื™ืœื“ ื˜ื•ืœ, ื‘ื•ื™ืขืŸ ืึท ื ื™ื™ึท ืคื™ืจืžื•ื•ืึทืจืข ื‘ื™ืœื“ (ื“ื•ืจืš ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ).

Schrรถdinger's Trusted Download. Intel Boot Guard
5. ืฉืจื™ื™ื‘ ืึท ื ื™ื™ึทืข ื‘ื™ืœื“ ืฆื• ื‘ืœื™ืฅ ื–ื›ึผืจื•ืŸ ื ื™ืฆืŸ ื“ื™ ืคืœืึทืฉ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ื˜ื•ืœ, ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืžื™ื˜ MEinfo ืึทื– ื“ื™ ME ื’ืขื’ื ื˜ ืื™ืฆื˜ ื›ึผื•ืœืœ ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ.

Schrรถdinger's Trusted Download. Intel Boot Guard
6. ื ื™ืฆืŸ ื“ื™ ืคืœืึทืฉ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ื˜ื•ืœ ืฆื• ืคืึทืจืžืึทื›ืŸ ืžืึทื ื•ืคืึทืงื˜ื•ืจื™ื ื’ ืžืึธื“ืข.

Schrรถdinger's Trusted Download. Intel Boot Guard
7. ื“ื™ ืกื™ืกื˜ืขื ื•ื•ืขื˜ ืจืขื‘ืึธืึธื˜, ื ืึธืš ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ MEinfo ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ืึทื– ื“ื™ FPFs ื–ืขื ืขืŸ ืื™ืฆื˜ ืคึผืจืึธื•ื’ืจืึทืžื“.

Schrรถdinger's Trusted Download. Intel Boot Guard
ื“ื™ ืึทืงืฉืึทื ื– ืึทืค ืฉื˜ืขื ื“ื™ืง ื’ืขื‘ืŸ Intel BG ืื•ื™ืฃ ื“ืขื ืกื™ืกื˜ืขื. ื“ื™ ืึทืงืฆื™ืข ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ืึทื ื“ื™ื–ื™ื™ื ื“, ื•ื•ืึธืก ืžื™ื˜ืœ:

  • ื‘ืœื•ื™ื– ื“ื™ ื‘ืึทื–ื™ืฆืขืจ ืคื•ืŸ ื“ื™ ืคึผืจื™ื•ื•ืึทื˜ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ (ื“"ื” ื“ืขืจ ืื™ื™ื ืขืจ ื•ื•ืึธืก ืขื ื™ื™ื‘ืึทืœื“ Intel BG) ื•ื•ืขื˜ ืงืขื ืขืŸ ืฆื• ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ืื•ื™ืฃ ื“ืขื ืกื™ืกื˜ืขื;
  • ืื•ื™ื‘ ืื™ืจ ืฆื•ืจื™ืงืงื•ืžืขืŸ ื“ื™ ืึธืจื™ื’ื™ื ืขืœ ืคื™ืจืžื•ื•ืึทืจืข ืฆื• ื“ืขื ืกื™ืกื˜ืขื, ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื ื™ืฆืŸ ืึท ืคึผืจืึธื’ืจืึทืžื™ืกื˜, ืขืก ื•ื•ืขื˜ ื ื™ืฉื˜ ืืคื™ืœื• ืงืขืจ ืื•ื™ืฃ (ืึท ืงืึทื ืกืึทืงื•ื•ืึทื ืก ืคื•ืŸ ื“ื™ ืขื ืคืึธืจืกืžืึทื ื˜ ืคึผืึธืœื™ื˜ื™ืง ืื™ืŸ ืคืึทืœ ืคื•ืŸ ืึท ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ื˜ืขื•ืช);
  • ืฆื• ื‘ืึทืงื•ืžืขืŸ ื‘ืึทืคืจื™ื™ึทืขืŸ ืคื•ืŸ ืึทื–ืึท ืึท UEFI ื‘ื™ื™ืึธื•ืก, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืžื™ื˜ ืคึผืจืึธื•ื’ืจืึทืžื“ FPFs ืžื™ื˜ ืึท "ืจื™ื™ืŸ" (ื“"ื”, ืจื™ืกืึธื•ืœื“ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืื•ื™ื‘ ืื™ืจ ื”ืึธื‘ืŸ ืฆื•ื˜ืจื™ื˜ ืฆื• ืึท ื™ื ืคืจืขืจืขื“ ืกืึทื“ืขืจื™ื ื’ ืกื˜ืึทื ืฆื™ืข ื“ื™ ืคึผืจื™ื™ึทื– ืคื•ืŸ ืึท ืžืึทืฉื™ืŸ, ืึธื“ืขืจ ืคืฉื•ื˜ ืคืึทืจื‘ื™ื™ึทื˜ืŸ ื“ื™ ืžืึธื˜ื”ืขืจื‘ืึธืึทืจื“ ).

ืฆื• ืคึฟืึทืจืฉื˜ื™ื™ืŸ ื•ื•ืึธืก ืึทื–ืึท ืึท ืจืึธืึธื˜ืงื™ื˜ ืงืขื ืขืŸ ื˜ืึธืŸ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืึธืคึผืฉืึทืฆืŸ ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ื•ื™ืกืคื™ืจืŸ ื“ื™ื™ืŸ ืงืึธื“ ืื™ืŸ ื“ื™ UEFI ื‘ื™ื™ืึธื•ืก ืกื•ื•ื™ื•ื•ืข. ื–ืืœ ืก ื–ืึธื’ืŸ, ืื™ืŸ ื“ื™ ืžืขืจืกื˜ ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืคึผืจืึทืกืขืกืขืจ ืžืึธื“ืข - SMM. ืึทื–ืึท ืึท ืจืึธืึธื˜ืงื™ื˜ ืงืขืŸ ื”ืึธื‘ืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืจืึธืคึผืขืจื˜ื™ืขืก:

  • ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื™ืŸ ืคึผืึทืจืึทืœืขืœ ืžื™ื˜ ื“ื™ ืึทืก (ืื™ืจ ืงืขื ืขืŸ ืงืึทื ืคื™ื’ื™ืขืจ ืคึผืจืึทืกืขืกื™ื ื’ ืฆื• ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืึท SMI ื™ื‘ืขืจืจื™ื™ึทืก, ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื˜ืจื™ื’ืขืจื“ ื“ื•ืจืš ืึท ื˜ื™ื™ึทืžืขืจ);
  • ื”ืึธื‘ืŸ ืึทืœืข ื“ื™ ืึทื“ื•ื•ืึทื ื˜ื™ื“ื–ืฉื™ื– ืคื•ืŸ ื–ื™ื™ึทืขื ื“ื™ืง ืื™ืŸ SMM ืžืึธื“ืข (ืคื•ืœ ืึทืงืกืขืก ืฆื• ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื‘ืึทืจืึทืŸ ืื•ืŸ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืจืขืกื•ืจืกืŸ, ื‘ืขืกืึธื“ื™ืงื™ื™ึทื˜ ืคื•ืŸ ื“ื™ ืึทืก);
  • ื“ืขืจ ืคึผืจืึธื’ืจืึทื ืงืึธื“ ืคื•ืŸ ื“ื™ ืจืึธืึธื˜ืงื™ื˜ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืื•ืŸ ื“ืขืงืจื™ืคึผื˜ื™ื“ ื•ื•ืขืŸ ืœืึธื ื˜ืฉื˜ ืื™ืŸ SMM ืžืึธื“ืข. ืงื™ื™ืŸ ื“ืึทื˜ืŸ ื‘ื ื™ืžืฆื ื‘ืœื•ื™ื– ืื™ืŸ SMM ืžืึธื“ืข ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ืึท ืขื ืงืจื™ืคึผืฉืึทืŸ ืฉืœื™ืกืœ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืึท ื”ืึทืฉ ืคื•ืŸ ืึท ืกื›ื•ื ืคื•ืŸ ืึทื“ืจืขืกืขืก ืื™ืŸ SMRAM. ืฆื• ื‘ืึทืงื•ืžืขืŸ ื“ืขื ืฉืœื™ืกืœ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืึทืจื™ื™ึทืŸ SMM. ืื•ืŸ ื“ืึธืก ืงืขืŸ ื–ื™ื™ืŸ ื’ืขื˜ืืŸ ืื™ืŸ ืฆื•ื•ื™ื™ ื•ื•ืขื’ืŸ. ื’ืขืคึฟื™ื ืขืŸ RCE ืื™ืŸ ื“ื™ SMM ืงืึธื“ ืื•ืŸ ื’ื•ื•ื•ืจืข ืขืก, ืึธื“ืขืจ ืœื™ื™ื’ืŸ ื“ื™ื™ืŸ ืื™ื™ื’ืขื ืข SMM ืžืึธื“ื•ืœืข ืฆื• ื“ื™ ื‘ื™ื™ืึธื•ืก, ื•ื•ืึธืก ืื™ื– ืื•ืžืžืขื’ืœืขืš ื–ื™ื ื˜ ืžื™ืจ ืขื ื™ื™ื‘ืึทืœื“ Boot Guard.

ืื–ื•ื™, ื“ืขื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืœืึทื•ื– ืึท ืึทื˜ืึทืงืขืจ ืฆื•:

  • ืฉืึทืคึฟืŸ ืึท ืคืึทืจื‘ืึธืจื’ืŸ, ืึทื ื“ืขืœืขื˜ืึทื‘ืœืข ืจืึธืึธื˜ืงื™ื˜ ืคื•ืŸ ืื•ืžื‘ืึทืงืึทื ื˜ ืฆื™ืœ ืื™ืŸ ื“ืขื ืกื™ืกื˜ืขื;
  • ื•ื™ืกืคื™ืจืŸ ื“ื™ื™ืŸ ืงืึธื“ ืื•ื™ืฃ ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื˜ืฉื™ืคึผืกืขื˜ ืงืึธืจืขืก ื™ืŸ ื“ื™ Intel SoC, ื ื™ื™ืžืœื™, ืื•ื™ืฃ ื“ื™ Intel ISH (ื ืขืžืขืŸ ืึท ืึธืคึผื’ืขื”ื™ื˜ ืงื•ืง ืื™ืŸ ื“ื™ ื‘ื™ืœื“).

Schrรถdinger's Trusted Download. Intel Boot Guard
Schrรถdinger's Trusted Download. Intel Boot Guard
ื›ืึธื˜ืฉ ื“ื™ ืงื™ื™ืคึผืึทื‘ื™ืœืึทื˜ื™ื– ืคื•ืŸ ื“ื™ Intel ISH ืกืึทื‘ืกื™ืกื˜ืขื ื–ืขื ืขืŸ ื ื™ืฉื˜ ื ืึธืš ื™ืงืกืคึผืœืึธืจื“, ืขืก ืื™ื– ืึท ื˜ืฉื™ืงืึทื•ื•ืข ื‘ืึทืคืึทืœืŸ ื•ื•ืขืงื˜ืึธืจ ืคึฟืึทืจ Intel ME.

ืคื™ื™ื ื“ื™ื ื’ื–

  1. ื“ืขืจ ืœืขืจื ืขืŸ ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ื‘ืึทืงื•ืžืขืŸ ืึท ื˜ืขื›ื ื™ืฉ ื‘ืึทืฉืจื™ื™ึทื‘ื•ื ื’ ืคื•ืŸ ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹Intel Boot Guard ื˜ืขื›ื ืึธืœืึธื’ื™ืข. ืžื™ื ื•ืก ืึท ืคึผืึธืจ ืคื•ืŸ ืกื™ืงืจื™ืฅ ืื™ืŸ Intel ืก ื–ื™ื›ืขืจื”ื™ื™ื˜ ื“ื•ืจืš ืึทื‘ืกืงื™ื•ืจื™ื˜ื™ ืžืึธื“ืขืœ.
  2. ืึท ื‘ืึทืคืึทืœืŸ ืกืฆืขื ืึทืจ ืื™ื– ื“ืขืจืœืื ื’ื˜ ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืฉืึทืคึฟืŸ ืึท ื•ื ื™ื ืกื˜ืึทืœืœืึทื‘ืœืข ืจืึธืึธื˜ืงื™ื˜ ืื™ืŸ ื“ื™ ืกื™ืกื˜ืขื.
  3. ืžื™ืจ ื’ืขื–ืขืŸ ืึทื– ืžืึธื“ืขืจืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ื–ืขื ืขืŸ ื˜ื•ื™ื’ืขื•ื•ื“ื™ืง ืคื•ืŸ ืขืงืกืึทืงื™ื•ื˜ื™ื ื’ ืึท ืคึผืœืึทืฅ ืคื•ืŸ ืคึผืจืึทืคึผืจื™ื™ืึทื˜ืขืจื™ ืงืึธื“ ืืคื™ืœื• ืื™ื™ื“ืขืจ ื“ื™ ื‘ื™ื™ืึธื•ืก ืกื˜ืึทืจืฅ ืคืœื™ืกื ื“ื™ืง.
  4. ืคึผืœืึทื˜ืคืึธืจืžืก ืžื™ื˜ Intel 64 ืึทืจืงืึทื˜ืขืงื˜ืฉืขืจ ื•ื•ืขืจืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ืื•ืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ืคึผืึทืกื™ืง ืคึฟืึทืจ ืคืœื™ืกื ื“ื™ืง ืคืจื™ื™ ื•ื•ื™ื™ื›ื•ื•ืืจื’: ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ, ืึท ื™ื ืงืจื™ืกื™ื ื’ ื ื•ืžืขืจ ืคื•ืŸ ืคึผืจืึทืคึผืจื™ื™ืึทื˜ืขืจื™ ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื– ืื•ืŸ ืกืึทื‘ืกื™ืกื˜ืึทืžื– (ื“ืจื™ื™ ืงืึธืจืขืก ืื™ืŸ ื“ื™ SoC ื˜ืฉื™ืคึผืกืขื˜: x86 ME, x86 ISH ืื•ืŸ ARC PMC).

ืžื™ื˜ื™ื’ืืฆื™ืขืก

ื•ื•ืขื ื“ืึธืจืก ื•ื•ืึธืก ื‘ืขืงื™ื•ื•ืŸ ืœืึธื–ืŸ ืžืึทื ื•ืคืึทืงื˜ื•ืจื™ื ื’ ืžืึธื“ืข ืึธืคืŸ ื–ืึธืœ ื–ื™ื™ืŸ ื–ื™ื›ืขืจ ืฆื• ืคืึทืจืžืึทื›ืŸ ืขืก. ื‘ื™ื– ืื™ืฆื˜, ื‘ืœื•ื™ื– ื–ื™ื™ืขืจ ืื•ื™ื’ืŸ ื–ืขื ืขืŸ ืคืืจืžืื›ื˜, ืื•ืŸ ื“ื™ ื ื™ื™ึทืข Kaby Lake ืกื™ืกื˜ืขืžืขืŸ ื•ื•ื™ื™ึทื–ืŸ ื“ืึธืก.

ื™ื•ื–ืขืจื– ืงืขื ืขืŸ ื“ื™ืกื™ื™ื‘ืึทืœ Intel BG ืื•ื™ืฃ ื–ื™ื™ืขืจ ืกื™ืกื˜ืขืžืขืŸ (ื•ื•ืึธืก ื–ืขื ืขืŸ ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• ื“ื™ ื“ื™ืกืงืจื™ื™ื‘ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™) ื“ื•ืจืš ืœื•ื™ืคืŸ ื“ื™ ืคืœืึทืฉ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ื˜ื•ืœ ืžื™ื˜ ื“ื™ -closemnf ืคึผืึทืจืึทืžืขื˜ืขืจ. ืขืจืฉื˜ืขืจ, ืื™ืจ ื–ืึธืœ ืžืึทื›ืŸ ื–ื™ื›ืขืจ (ื ื™ืฆืŸ MEinfo) ืึทื– ื“ื™ Intel BG ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ืŸ ื“ื™ ME ื’ืขื’ื ื˜ ื’ื™ื˜ ืฆื• ื•ื™ืกืžืขืงืŸ ื“ืขื ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื ืึธืš ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืื™ืŸ FPFs.

ืžืงื•ืจ: www.habr.com

ืงื•ื™ืคืŸ ืคืึทืจืœืึธื–ืœืขืš ื”ืึธืกื˜ื™ื ื’ ืคึฟืึทืจ ื–ื™ื™ื˜ืœืขืš ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก ๐Ÿ”ฅ ืงื•ื™ืคื˜ ืคืึทืจืœืขืกืœืขื›ืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื”ืึธืกื˜ื™ื ื’ ืžื™ื˜ DDoS ืฉื•ืฅ, VPS VDS ืกืขืจื•ื•ืขืจืก | ProHoster