TOP CONFIDENTIAL ASSIGNMENT SECRETS

all through boot, a PCR in the vTPM is prolonged Using the root of the Merkle tree, and later verified with confidential agreement the KMS prior to releasing the HPKE personal key. All subsequent reads from the foundation partition are checked versus the Merkle tree. This makes sure that the whole contents of the root partition are attested and any