* [U-Boot] How to perform a secure boot on ARM Linux
@ 2014-01-20 12:40 rakesh ranjan
2014-01-20 15:16 ` Detlev Zundel
2014-01-20 18:47 ` Marek Vasut
0 siblings, 2 replies; 5+ messages in thread
From: rakesh ranjan @ 2014-01-20 12:40 UTC (permalink / raw)
To: u-boot
Hi,
I have a beagle board and want to create a u-boot that verifies the kernel
and rootfs before booting it. Any pointers on how it can be achieved will
be appreciated.
Rakesh
^ permalink raw reply [flat|nested] 5+ messages in thread
* [U-Boot] How to perform a secure boot on ARM Linux
2014-01-20 12:40 [U-Boot] How to perform a secure boot on ARM Linux rakesh ranjan
@ 2014-01-20 15:16 ` Detlev Zundel
2014-01-20 18:00 ` Jagan Teki
2014-01-20 18:47 ` Marek Vasut
1 sibling, 1 reply; 5+ messages in thread
From: Detlev Zundel @ 2014-01-20 15:16 UTC (permalink / raw)
To: u-boot
Hi Rakesh,
> I have a beagle board and want to create a u-boot that verifies the kernel
> and rootfs before booting it. Any pointers on how it can be achieved will
> be appreciated.
You can start here by reading the provided documentation:
http://git.denx.de/?p=u-boot.git;a=blob;f=doc/uImage.FIT/signature.txt;hb=HEAD
There's also a ELCE 2013 presentation by Simon Glass:
http://events.linuxfoundation.org/sites/events/files/slides/chromeos_and_diy_vboot_0.pdf
And a paper by Jagan Teki from the U-Boot Mini Summit
http://www.denx.de/wiki/pub/U-Boot/MiniSummitELCE2013/U-Boot_verified_RSA_boot_flow_on_arm_target.pdf
The mailing list is surely the right place for further questions ;)
Cheers
Detlev
--
There are two hard things in computer science: cache invalidation,
naming things, and off-by-one errors.
--
DENX Software Engineering GmbH, MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-40 Fax: (+49)-8142-66989-80 Email: dzu at denx.de
^ permalink raw reply [flat|nested] 5+ messages in thread
* [U-Boot] How to perform a secure boot on ARM Linux
2014-01-20 15:16 ` Detlev Zundel
@ 2014-01-20 18:00 ` Jagan Teki
0 siblings, 0 replies; 5+ messages in thread
From: Jagan Teki @ 2014-01-20 18:00 UTC (permalink / raw)
To: u-boot
On Mon, Jan 20, 2014 at 8:46 PM, Detlev Zundel <dzu@denx.de> wrote:
> Hi Rakesh,
>
>> I have a beagle board and want to create a u-boot that verifies the kernel
>> and rootfs before booting it. Any pointers on how it can be achieved will
>> be appreciated.
>
> You can start here by reading the provided documentation:
>
> http://git.denx.de/?p=u-boot.git;a=blob;f=doc/uImage.FIT/signature.txt;hb=HEAD
>
> There's also a ELCE 2013 presentation by Simon Glass:
>
> http://events.linuxfoundation.org/sites/events/files/slides/chromeos_and_diy_vboot_0.pdf
>
> And a paper by Jagan Teki from the U-Boot Mini Summit
>
> http://www.denx.de/wiki/pub/U-Boot/MiniSummitELCE2013/U-Boot_verified_RSA_boot_flow_on_arm_target.pdf
>
> The mailing list is surely the right place for further questions ;)
One more paper to Detlev pointers!
http://www.denx.de/wiki/pub/U-Boot/OpenSourceIndia2013/Multi_image_booting_scenarios.pdf
--
Jagan.
^ permalink raw reply [flat|nested] 5+ messages in thread
* [U-Boot] How to perform a secure boot on ARM Linux
2014-01-20 12:40 [U-Boot] How to perform a secure boot on ARM Linux rakesh ranjan
2014-01-20 15:16 ` Detlev Zundel
@ 2014-01-20 18:47 ` Marek Vasut
2014-01-23 2:58 ` Simon Glass
1 sibling, 1 reply; 5+ messages in thread
From: Marek Vasut @ 2014-01-20 18:47 UTC (permalink / raw)
To: u-boot
On Monday, January 20, 2014 at 01:40:52 PM, rakesh ranjan wrote:
> Hi,
>
> I have a beagle board and want to create a u-boot that verifies the kernel
> and rootfs before booting it. Any pointers on how it can be achieved will
> be appreciated.
>
> Rakesh
See doc/uImage.FIT/verified-boot.txt and doc/uImage.FIT/signature.txt in the
source tree .
Best regards,
Marek Vasut
^ permalink raw reply [flat|nested] 5+ messages in thread
* [U-Boot] How to perform a secure boot on ARM Linux
2014-01-20 18:47 ` Marek Vasut
@ 2014-01-23 2:58 ` Simon Glass
0 siblings, 0 replies; 5+ messages in thread
From: Simon Glass @ 2014-01-23 2:58 UTC (permalink / raw)
To: u-boot
+Tom
Hi,
On 20 January 2014 11:47, Marek Vasut <marex@denx.de> wrote:
> On Monday, January 20, 2014 at 01:40:52 PM, rakesh ranjan wrote:
> > Hi,
> >
> > I have a beagle board and want to create a u-boot that verifies the
> kernel
> > and rootfs before booting it. Any pointers on how it can be achieved will
> > be appreciated.
> >
> > Rakesh
>
> See doc/uImage.FIT/verified-boot.txt and doc/uImage.FIT/signature.txt in
> the
> source tree .
>
Final suggestion - also see this post:
https://plus.google.com/103658573279088224166/posts/NDgYtMnmAge
The actual patches did not make it into the release, but hopefully next
time.
Regards,
Simon
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2014-01-23 2:58 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-01-20 12:40 [U-Boot] How to perform a secure boot on ARM Linux rakesh ranjan
2014-01-20 15:16 ` Detlev Zundel
2014-01-20 18:00 ` Jagan Teki
2014-01-20 18:47 ` Marek Vasut
2014-01-23 2:58 ` Simon Glass
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.