throughout boot, a PCR on the vTPM is extended Along with the root of the Merkle tree, and later confirmed with the KMS just before releasing the HPKE personal key. All subsequent reads within the root partition are https://noransomattack.com