THE SMART TRICK OF CONFIDENTIAL AIDE THAT NO ONE IS DISCUSSING

for the duration of boot, a PCR in the vTPM is extended Along with the root of the Merkle tree, and later on verified via the KMS right before releasing the HPKE private critical. All subsequent reads from the basis partition are checked against the Merkle tree. This ensures that the whole contents of the basis partition are attested and any try an