Linux Lockdown and Hibernation (again)
Summary
Matthew Garrett's Linux-focused analysis explains how the Linux Lockdown feature, TPM-backed measurements, and PCRs can prove that a hibernation image was created in-kernel, not by root. It covers PCR 5, NV indexes, attestation keys, and a patchset designed to prevent tampering and enable secure resume.