Hardware Security
What is the difference between secure boot and measured boot?
- AThey are the same thing under different names
- BSecure boot stops incorrect software from starting; measured boot records hashes of booted software in a TPM or similar so the state can be checked later
- CMeasured boot merely measures how long booting takes
Show answer and explanation
Answer: B. Secure boot stops incorrect software from starting; measured boot records hashes of booted software in a TPM or similar so the state can be checked later
In measured boot, each stage hashes the next piece of software and records it cumulatively in TPM registers (PCRs). A PCR can only be updated by combining its previous value with a new hash, so records cannot be forged. Boot itself is not stopped, but the recorded values let one later confirm which software started, or prove it to a remote server.
- A. They differ in stopping versus recording.
- B. Correct. They are often used together.
- C. It measures software contents, not time.