ROOT OF TRUST // HARDWARE-ENFORCED TAMPER EVIDENCE
TPM 2.0 MEASURED BOOT & PCR-SEALED WAL FORENSICS
CRTM Root Integrity // TCG Event Log Verification // Nonce-Bound Quotes // Encrypted WAL Replay
REGISTERS: 0
// TPM 2.0 PCR REGISTER BANK (SHA-256 MEASUREMENTS)
TCG PC Client Specification // Golden Baseline Verification
// TPM 2.0 ATTESTATION QUOTE & HARDWARE SIGNATURE
Endorsement Primary Key (EK) & Attestation Key (AK) Nonce-Bound Hardware Stamp
// TCG MEASURED BOOT EVENT LOG REPLAY
Sequential Extend Recomputation: PCR_new = SHA256(PCR_prev || Event)
// PCR-SEALED WRITE-AHEAD LOG (WAL) FORENSICS & REPLAY
AES-256-GCM Hardware-Sealed Blocks // Tamper-Evident Hash Chain