Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

Unless and until we get to efficient homomorphic compute, these measures will only ever be security via obscurity.

I don't see how homomorphic encryption is particularly applicable to secureboot.

You want to be able to deploy and execute code outside the control of whoever physically controls the machine.

Either you implement it with security features hidden from the device holder, in which case it will always be broken eventually, or you guarantee the capabilities with mathematics - in which case a security break cannot happen even if the physical machine's description is completely public.

There are certainly layers to this that I'm missing, but I think homomorphic compute is the only unbreakable answer to secure compute in general.