I've learned that a TPM can supposedly attest to the state of a computers BIOS being good. It does this by asking the BIOS to send a hash of it's current state. So what stops a compromised BIOS sending a precalculated hash of a good state (that it is not in)? Many thanks.