[tboot-devel] private key compromise in secure boot

[Mat <alt...@gm...>]

How would one design handling private key(used to sign image) compromise in
the secure/trusted boot solution on embedded devices like routers sold to
millions of customers?

I am looking for step-by-step instructions including how would patch these
devices in the event private key is leaked.

>