blob: d34d1c62fe36d4f72804189e6890fb9ddfcc78ef (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
% ----------------------------
\subsection{Basics}
% ----------------------------
\begin{frame}[fragile]
\frametitle{Motivation}
Why do we talk about Secureboot?
\begin{itemize}
\item Protection
\begin{itemize}
\item Remote Access
\item Physical Access
\end{itemize}
\item Support/Warranty
\end{itemize}
How do we get it?
\begin{itemize}
\item Solution: Code Integrity
\item Implementation: Secureboot
\end{itemize}
\end{frame}
% ----------------------------
\begin{frame}[fragile]
\frametitle{Data Integrity}
\begin{figure}[h]
\centering
\includegraphics[width=8cm]{images/data-hash-signature.png}
\end{figure}
\end{frame}
% ----------------------------
\begin{frame}[fragile]
\frametitle{Typical Boot Sequence}
\begin{itemize}
\item Power/Reset
\item ROM Loader (load, execute BL)
\item Bootloader (load, execute OS)
\item Operating System (load, execute Application)
\end{itemize}
\begin{figure}[h]
\centering
\includegraphics[width=8cm]{images/bootseq_typical.png}
\end{figure}
\end{frame}
% ----------------------------
\begin{frame}[fragile]
\frametitle{Secure Boot Sequence}
\begin{itemize}
\item Power/Reset
\item ROM Loader (load, verify, execute BL)
\item Bootloader (load, verify, execute OS)
\item Operating System (load, verify, execute Application)
\end{itemize}
\begin{figure}[h]
\centering
\includegraphics[width=8cm]{images/bootseq_sec.png}
\end{figure}
\end{frame}
% ----------------------------
\begin{frame}[fragile]
\frametitle{Secure Boot Sequence}
\begin{itemize}
\item Power/Reset
\item ROM Loader
\begin{itemize}
\item Hardware Specific
\item e.g. High Assurance Boot v4 (i.mx6/7/8)
\end{itemize}
\item Bootloader (u-boot)
\begin{itemize}
\item signed FIT Images
\end{itemize}
\item Operating System (Linux)
\begin{itemize}
\item signed Modules
\item Filesystem Integrity
\end{itemize}
\end{itemize}
\end{frame}
|
