through boot, a PCR of your vTPM is extended While using the root of this Merkle tree, and afterwards verified through the KMS right before releasing the HPKE non-public critical. All subsequent reads from the basis https://noransomattack.com