2025-02-12 03:58 UTC
Does anyone know how booting Linux in FIPS mode gains any use or security from the `.vmlinuz.hmac` file? The interweb has no info at all.
It's a basic SHA of the vmlinuz file, but it has no way to verify authenticity or integrity of the hash, and is distributed with the thing it supposedly verifies. How does that have any purpose?
#cybersecurity #security #infosec #InfosecCommunity #askInfosec
Replies (0)
No replies.