Attacking Hardware Root of Trust from UEFI Firmware