I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time?
On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to prevent evil maid attack. Also it check the infos of the SSD firmware and the BIOS.
For dumping the BIOS info I'm using
dmidecode, to grab ROM size, version etc.
dmidecode --type bios| grep -E "Version|Release Date|Address|Runtime Size|ROM Size" > ./bios_info_orig.txt
I tried to dump the firmware with some tools like
flashrom but with every reboot the MD5 check fails.
Yesterday, my PC prompted an UEFI update. I installed it and the script detected the changes only because the version number was changed, but the size was the same.
So my question is, there's a solution to this?
dmidecode shows the size in mb, maybe there's some workaround that let me show the size on KB? If someone will flash something upon surely the size will change.