> -- and it's actually pretty broken, in that it assumes that
> the signature being present means there's valid boot code.

Other than a signature in the boot code itself, I don't see how it could
know what "valid" boot code looks like, since there is more than one right
answer.

What sort of non-broken algorithm would you recommend?

(This is not important at all, I'm just curious.)

Todd Whitesel
toddpw @ best.com