Which term describes the foundational hardware element that contains cryptographic keys used during secure boot and trust establishment?

Which term describes the foundational hardware element that contains cryptographic keys used during secure boot and trust establishment?

• A. Root of Trust
• B. Hardware Security Module (HSM)
• C. Attestation
• D. Identity Proofing

Answer: (A)

Root of Trust describes the foundational hardware element that contains cryptographic keys used during secure boot and trust establishment. It anchors the device’s trust by securely storing the root keys and initial measurements, which are used to verify each step in the boot process and to establish a trusted environment for the rest of the system. Because the keys and measurements originate in hardware and are protected from tampering, the Root of Trust is the basis for the chain of trust; if it’s secure, the boot components can be verified as authentic and trust can be extended throughout the system. If the root were compromised, the entire trust chain could be broken. An HSM, while it protects and uses keys, is typically an external device for general cryptographic operations and data protection rather than the boot-time anchor for a device’s trust. Attestation is the process of proving system state to a verifier and uses the root of trust, but it is not the hardware element itself. Identity proofing deals with verifying a user’s identity, not hardware-based trust establishment.

Root of Trust describes the foundational hardware element that contains cryptographic keys used during secure boot and trust establishment. It anchors the device’s trust by securely storing the root keys and initial measurements, which are used to verify each step in the boot process and to establish a trusted environment for the rest of the system. Because the keys and measurements originate in hardware and are protected from tampering, the Root of Trust is the basis for the chain of trust; if it’s secure, the boot components can be verified as authentic and trust can be extended throughout the system. If the root were compromised, the entire trust chain could be broken.

An HSM, while it protects and uses keys, is typically an external device for general cryptographic operations and data protection rather than the boot-time anchor for a device’s trust. Attestation is the process of proving system state to a verifier and uses the root of trust, but it is not the hardware element itself. Identity proofing deals with verifying a user’s identity, not hardware-based trust establishment.