Changes between Version 2 and Version 3 of secure_boot

Timestamp:

04/07/2021 03:07:11 PM (3 years ago)

Author:

Tim Harvey

Comment:

add reference to F-Secure U-Boot security presentation

secure_boot

@@ -20 +20 @@
 
 
-== Secure the U-Boot Environment
-For a secure U-Boot environment you want to disable the ability to stop autoboot and get to a U-Boot console. Additionally you do not want to use env variables that can be used by an attacker to affect the boot sequence.
+== Secure U-Boot
+For a secure U-Boot you want to disable the ability to stop autoboot and get to a U-Boot console. Additionally you do not want to use env variables that can be used by an attacker to affect the boot sequence.
 
 To do this you need to understand where U-Boot env comes from:
@@ -72 +72 @@
  * use U-Boot 'mkenvimage' on your development host to create a binary FLASH env that sets necessary defaults for any writeable vars you declare
 
+For additional details on securing U-Boot see the following excellent presentation by F-Secure:
+* https://labs.f-secure.com/assets/BlogFiles/2020-05-u-booting-securely-wp-final.pdf 
 
 == Securing the Kernel, FDT, ramdisk via FIT images