An apparatus for protecting a basic input/output system (BIOS) in a computing system, the apparatus comprising: a BIOS read only memory, comprising: a plurality of BIOS content partitions, wherein each of said BIOS content partitions is stored as plaintext; and a plurality of encrypted message digests, wherein each of said encrypted message digests comprises an encrypted version of a first message digest that is associated with a corresponding one of said BIOS content partitions; a tamper timer, configured to periodically generate a BIOS check interrupt that interrupts normal operation of the computing system at a prescribed interval a tamper detector, operatively coupled to said BIOS ROM and said tamper timer, configured to access a number of said BIOS content partitions and the corresponding encrypted message digests upon assertion of said BIOS check interrupt, and configured to, for each one of said number of said BIOS content partitions, direct a microprocessor to generate a second message digest corresponding to said one of said BIOS content partitions and a decrypted message digest corresponding to said corresponding one of said encrypted message digests using the same algorithms and key that were employed to generate said first message digest and said corresponding one of said encrypted message digests, and configured to compare said second message digest with said decrypted message digest, and configured to preclude said operation of said microprocessor if said second message digest and said decrypted message digest are not equal; and a random number generator, disposed within execution logic, wherein said random number generator generates a random number at completion of a current BIOS check, which is employed to randomly designate the number of BIOS content partitions to be checked during a following BIOS check. a BIOS read only memory, comprising: a plurality of BIOS content partitions, wherein each of said BIOS content partitions is stored as plaintext; and a plurality of encrypted message digests, wherein each of said encrypted message digests comprises an encrypted version of a first message digest that is associated with a corresponding one of said BIOS content partitions; a plurality of BIOS content partitions, wherein each of said BIOS content partitions is stored as plaintext; and a plurality of encrypted message digests, wherein each of said encrypted message digests comprises an encrypted version of a first message digest that is associated with a corresponding one of said BIOS content partitions; a tamper timer, configured to periodically generate a BIOS check interrupt that interrupts normal operation of the computing system at a prescribed interval a tamper detector, operatively coupled to said BIOS ROM and said tamper timer, configured to access a number of said BIOS content partitions and the corresponding encrypted message digests upon assertion of said BIOS check interrupt, and configured to, for each one of said number of said BIOS content partitions, direct a microprocessor to generate a second message digest corresponding to said one of said BIOS content partitions and a decrypted message digest corresponding to said corresponding one of said encrypted message digests using the same algorithms and key that were employed to generate said first message digest and said corresponding one of said encrypted message digests, and configured to compare said second message digest with said decrypted message digest, and configured to preclude said operation of said microprocessor if said second message digest and said decrypted message digest are not equal; and a random number generator, disposed within execution logic, wherein said random number generator generates a random number at completion of a current BIOS check, which is employed to randomly designate the number of BIOS content partitions to be checked during a following BIOS check.