Binarly has an analysis of the private key leaks that took place at Lenovo in September 2022 and MSI in April 2023.
The report's main finding was that multiple companies were apparently using the same Intel Boot Guard private keys to sign different types of firmware images.
https://binarly.io/posts/Dissecting_Intels_Explanation_of_Key_Usage_in_Integrated_Firmware_Images_IFWI/index.html
Catalin Cimpanu
npub1tq…3aefw
2023-11-12 18:21:39 UTC
Author Public Key
npub1tqfukrqgh928vktkl6vx063ck2c4yn3ek8m44v3txfhztqe65anq63aefwSeen on
wss://nos.lolPublished at
2023-11-12 18:21:39 UTCEvent JSON
{
"id": "40a000534ca0b1202aee9cf524e7a85ae13465c1f062ee22bebabb3e49f49179",
"pubkey": "5813cb0c08b954765976fe9867ea38b2b1524e39b1f75ab22b326e25833aa766",
"created_at": 1699813299,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/campuscodi/statuses/111398964379211819",
"activitypub"
]
],
"content": "Binarly has an analysis of the private key leaks that took place at Lenovo in September 2022 and MSI in April 2023.\n\nThe report's main finding was that multiple companies were apparently using the same Intel Boot Guard private keys to sign different types of firmware images.\n\nhttps://binarly.io/posts/Dissecting_Intels_Explanation_of_Key_Usage_in_Integrated_Firmware_Images_IFWI/index.html",
"sig": "112b418f9cdf8a1dbd44fe7401dcf0de09d058a0ac95a47376d1c94230309191c1878513e6175a9812ba9ea8552f77cebc89112b344bd9bc1986b925840af6ef"
}