I've learned that a TPM can supposedly attest to the state of a computer's BIOS being good. It does this by asking the BIOS to send a hash of its current state.

So what stops a compromised BIOS from sending a precalculated hash of a good state (that it is not in)?


The BIOS module stores the CRTM (Core Root of Trust for Measurements) and as per TCG specification it should be immutable. CRTM measures the integrity of rest of BIOS code. CRTM ensures that measurement taken is valid and then give control to rest of BIOS code.

Integrity Measurement

This measurement also involves Digital Signature verification, and public keys for verification are hardwired AFAIK (also known as Hardware root of trust). The BIOS code is generally digitally signed. So, if you modify the BIOS code, the signature verification will fail and CRTM won't pass the control to the rest of BIOS code.

Below link will be helpful:


  • Thank you, this is interesting. So the CRTM is completely immutable then?
    – Bob
    Jul 26 at 12:09
  • Completely immutable is not the word I'll use. It's immutable and generally use read-only storage area for e.g. NV-memory.
    – saurabh
    Jul 26 at 12:38
  • Ok. So could any normal malware modify it or would you need special hardwarw tools or something?
    – Bob
    Jul 26 at 12:42
  • OTP (One time programmable) NVM is used and AFAIK malware cannot modify them. Attacks on these NVM requires special equipment.
    – saurabh
    Jul 26 at 13:00
  • Ah ok cool. Thanks!
    – Bob
    Jul 27 at 14:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.