trusting pci/e option/expansion rom resouce collection

[arhabd]

i am creating this github discussion in conjunction with pci/e device whitelisting being brought up in the matrix channel

the worry regarding a malicious pci/e device would be that it contains an option rom that gets activated when the bios is walking the bus this option rom would then proceed to load some type of software into the heads environment that intercepts secrets or in some way tampers with the integrity of the boot process or social engineer the user into signing malicious boot files.

Talk 2014 DEF CON 22 - NSA Playset - PCIe
Talk 2019 NDSS 2019 Exploring Vulnerabilities in OS IOMMU Protection via Untrustworthy DMA
Talk 2024 You've Already Been Hacked: What if There Is a Backdoor in Your UEFI OROM?

Slides ???? Advanced x86: BIOS and System Management Mode Internals PCI {Op(on/Expansion} ROMs

Paper 2006 Implementing and Detecting a PCI Rootkit