for the duration of boot, a PCR of the vTPM is prolonged Using the root of this Merkle tree, and afterwards verified via the KMS just before releasing the HPKE personal critical. All subsequent reads from the root https://noransomattack.com