we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, from my basic understanding that the most effective ways is to infect the HDD or BIOS firmware.
Now the infected HDD can be avoided by using another storage media e.g. USB pendrives and to use live boot OS that uses RAM instead of HDD e.g. Tails OS, But, the real problem that worries me is the already infected BIOS and my question is :
What can I do in order to protect my encryption private keys in case of infected BIOS? please note that I assume that the BIOS is already infected since the governments can modify and temper with BIOS firmware before it is being sold in their country.