Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

I'm not sure that they can of the key is proprietary to Intel. I think this would open up those projects to litigation.

It's just a string of characters.

Software, movies, music is just a string of bits.

Using something leaked always carries some inherent risk.

So are bomb threats and false advertising.

I don't think "it's just characters" is a one-simple-trick.

There seems to be a bit of a precedence with the AACS DVD encryption keys that got leaked (https://en.m.wikipedia.org/wiki/AACS_encryption_key_controve...), the suppression of that key. Seems to have failed, it was widely copied, and you can even find a copy of it on my link to Wikipedia.

> I'm not sure that they can of the key is proprietary to Intel. I think this would open up those projects to litigation

Depends of the legislation.

That's questionable in the US since the keys are 100% machine generated and thus not copyrightable.

In most of the EU, it's clear though, there's interobability exceptions and those keys can be shared freely.

The difference is that software and music are made by authors unlike keys, that's what makes them copyrightable

you make a mathematical formula that generates the key.

Good luck with that argument!

"Your honor, I wasn't copying that movie. You see, I applied a mathematical formula to the .zip file, and it just happened to produce the movie as output. Coincidence!"

(That's not to say the key is copyrightable, it's not. I think the relevant law would be the DMCA anti-circumvention provision.)

"I didn't distribute the movie, just a file that XOR'd every byte with 255!"

Technical people tend to see the law as a technical thing, where technical arguments will win. Courts are generally unamused, since every judge has years of experience with defendants who think that they've discovered one simple trick.