Hardware Security
What is the advantage of using public-key cryptography to verify software signatures in secure boot?
- ADevices need only the public key for verification, while the signing private key stays securely with the vendor, so analyzing a device does not enable forged signatures
- BPublic-key cryptography is always faster than symmetric cryptography
- CThe public key must be kept secret
Show answer and explanation
Answer: A. Devices need only the public key for verification, while the signing private key stays securely with the vendor, so analyzing a device does not enable forged signatures
With symmetric verification, the verification key can also create signatures, so extracting it from one device could enable fake software for every device. With public-key cryptography, devices hold only a public key usable for verification, and the signing private key stays inside the vendor's secure facility. Knowing the public key does not allow forging signatures.
- A. Correct. There is no private key on the device to extract.
- B. Public-key cryptography is generally slower.
- C. The public key may be known without harm.