预启动身份验证 [英] Pre boot authentication

问题描述

Hy guys

我有一个需要帮助的小项目。我想在我的电脑上添加一个验证，它将在启动选项之前运行，之后我可以选择输入BIOS（验证意味着密码或某些按键）。现在我做了一些研究，有人建议我去研究UEFI，但这对我没有多大帮助。我只是想知道一种语言（汇编可能吗？），更重要的是它应该有什么格式以及插入位置。



感谢先进



编辑：很多人认为我希望这个脚本（让我们称之为）在bios之前运行。这是错误的我希望bios在启动选项出现之前运行它（脚本）所以没有人可以访问我的任何操作系统。



i只想要一个简单的解决方案，如

（pseudocot不知道需要什么语言？C或汇编？！）

得到输入

如果输入！=预期的内容

关闭笔记本电脑



然后对我的BIOS进行简单的修改，这样它就可以在其他人之前运行这个过程了。但是我失去了希望这个东西那个我觉得这很容易甚至可能...

Hy guys
I have a little project i need help with. i want to add an authentication to my pc that will run before the boot options and before i can choose to enter bios(authentication means either password or certain key presses). now i have done some research and someone recomended me to study UEFI but it didn't help me much. i just want to know a language (assembly maybe?) and more important what format should it have and where to insert it.

thanks in advanced

edit: a lot of people think i want this script(let's call it that) to run before bios. this is wrong i want bios to run it(the script) before boot options appear so noone can acces any of my os.

i just want a simple solution like
(pseudocot don't know what language needed? C or assembly?!)
get input
if input != what expected
power off laptop

and then a simple modify to my bios so it will run this process before others..but i am losing hope that this thing that i considered so easy is even possible...

推荐答案

这个小项目远不如你想象的那么容易。



首先，您将被限制为ASM代码。您根本不会拥有任何库，因此您必须从头开始编写所有内容，包括任何加密算法和密钥存储和管理。如果您认为需要完成此操作，则不会将密码以明文形式存储在某个磁盘扇区中。



您将拥有研究分区表如何工作以及它们如何让BIOS知道如何找到新的引导代码。



您还必须编写一个安装程序/卸载程序来移动它磁盘上的O / S引导装载程序不在路上，因此可以为您的代码留出空间，并跟踪您移动它的位置，并确保有足够的空间进行操作。这些不是文件操作，它们是磁盘扇区操作。



您的代码也必须设置环境来加载O / S引导加载程序和手动控制到了它。



现在，如果忘记/胖手指密码怎么办？你如何从这些情况中恢复过来？你如何验证该人的身份以重置密码？





你不会找到做的例子这个。这是你需要知道的事情，非常好，你正在做什么以及一切如何运作。

This little project is nowhere near as easy as you think it is.

First, you're going to be limited to ASM code. You're not going to have ANY libraries at all, so you have to write everything from scratch, including any encryption algorithms and key storage and management. If you think you need to go through this, you're not going to store the passwords in clear text in a disk sector somewhere.

You're going to have to research how partition tables work and how they let the BIOS know how to find the new boot code.

You also have to write an installer/uninstaller for this to move the O/S boot loader on disk out of the way so there's room for your code, and keep track of where you moved it and make sure there's room to do it. These are NOT file operations, they are disk sector operations.

Your code is also going to have to setup the environment to load the O/S boot loader and hand control over to it.

Now, what if you forget/fat finger the password? How are you going to recover from these situations? How are you going to verify the identity of the person to reset the password?


You're not going to find examples of doing this. This is something where you need to know, extremely well, what you're doing and how everything works.

你可以从这里开始：http://x86asm.net/articles/uefi-programming-first-steps [ ^ ]，但我不知道为什么你需要它 - 请看我对这个问题的评论。

-SA

You could start here: http://x86asm.net/articles/uefi-programming-first-steps[^], but I have no idea why would you ever need it — please see my comment to the question.

—SA

我发现：Bios中断服务例程（ISR）。你们中的任何人都知道一些事情，如果它可能会这样吗？

i found this: Bios Interrupt Service Routine (ISR). any of you guys know something about it and if it might work this way?

这篇关于预启动身份验证的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！