I've learned that a TPM can supposedly attest to the state of a computers BIOS being good. It does this by asking the BIOS to send a hash of it's current state.

So what stops a compromised BIOS sending a precalculated hash of a good state (that it is not in)?

Many thanks.