Questions tagged [secure-boot]
The secure-boot tag has no usage guidance.
12
questions
0
votes
0answers
32 views
“Provision Entity” for an open source approach to remote attestation
I am looking for a Company/Organization, which can be the "Provision Entity" for me.
To explain what criteria a provision entity has to fulfil, I draw a picture of the case:
I have a open network, ...
2
votes
0answers
49 views
“Trusted memory” What does it mean?
It is often cited "to load from untrusted memory to a trusted system memory" when describing the secure boot process. I wonder, when can we consider a memory as "trusted"?
0
votes
0answers
78 views
Bypassing Secure Boot in System on Chip
To bypass a secure boot for System on Chip (SoC), some attacks target the phase of copying the bootloader from where it is stored to the main memory. Instead, a malicious code will be copied to the ...
1
vote
1answer
51 views
Integrity Check on power on VS. Secure boot
Can we consider the Integrity Check on power-on and the secure boot equal from security point of view?
Secure boot is about allowing only a trusted SW to boot on the processor. A chain of trust can ...
0
votes
1answer
65 views
Is there a reasoning encrypting a GPL binary where I have to publish the sourcecode?
We're a company selling embedded devices. Our devices use u-boot & Linux, both being GPL and therefore we have to release the sourcecode as used to build our binary.
We're in the process of ...
0
votes
1answer
149 views
Why authenticated boot not Secure boot?
Context: Secure boot is one of the important elements of Trusted Computing in computer system. One variety of the Secure boot is authenticated boot. While secure boot prevent the boot of a non trusted ...
1
vote
0answers
20 views
High Availability Boot processes and only using code-signing certificates
High Availability Boot (HAB) is a technique described here in an NxP application note. This is best summarised as:
"HAB authentication is based on public key cryptography using the RSA algorithm in ...
1
vote
3answers
148 views
How much of the system is secure boot going to cover?
Background: We're developing for a Debian 9.8 system on an x86, but most of us here are more used to dealing with embedded devices.
according to wikipedia, secure boot can "secure the boot process ...
0
votes
0answers
42 views
Should I Pursue Platform-Ownership?
the context is this introduction in an HP whitepaper. I'm inquiring about "platform-ownership" within the Secure-Boot environment.
I'm looking for a simplified summary of platform-ownership. Much of ...
1
vote
2answers
186 views
Secure Boot - Verifying applications
I have been reading up on Secure Boot, in particular what it actually checks during the boot process.
According to Microsoft the Secure Boot process works as follows:
Firmware Boot Components: The ...
2
votes
1answer
74 views
Secure Boot - Usage of blacklist DB
I have been reading up on the details of Secure Boot, in particular the authorized and forbidden databases:
Before enabling UEFI Secure Boot (by setting the PK) the white and black lists DB & ...
1
vote
0answers
105 views
Secure way to sign virtualbox module for secure boot
I'm not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it's not up-to-date I'm installing Virtualbox from the official ...
