Patent ID: 8560845

Claim:
A non-transitory computer-readable storage medium storing instructions which, when executed by a computing device, cause the computing device to perform a method to disable tamper-resistant booting on the computing device, the method comprising: generating, at a firmware level, a password verifier by applying a number of iterations of an encryption algorithm to a salt value and a password associated with the tamper-resistant booting; receiving, from a user, a request to disable the tamper-resistant booting, the request comprising a request password; at an operating system level, generating a password proof by applying a first portion of the number of iterations of the encryption algorithm to the request password and the salt value, wherein each iteration generates a current iteration password proof based on a previous iteration password proof generated during a previous iteration, and storing a password proof generated from the last iteration of the first portion in a predetermined storage location; restarting the computing device; and at the firmware level during reboot of the computing device: retrieving the password proof from the predetermined storage location, performing a remaining second portion of the number of iterations to the password proof to yield an iterated password proof, such that the first portion of the number of iterations plus the remaining second portion of the number of iterations equals the number of iterations, and disabling tamper-resistant booting if the iterated password proof matches the password verifier.