Tag
secure-boot
- May 23, 2026 Signature Verification and Where the Root Key Lives How a constrained bootloader verifies an image signature, which algorithms fit in its budget, and why storing the public key in flash defeats the purpose. embedded systems
- Oct 11, 2025 Anti-Rollback Counters and Version Monotonicity Why a validly signed older image is still a downgrade attack, how a monotonic counter is kept without a battery, and what the counter costs in flash endurance. embedded systems
- Jan 19, 2024 Measured Boot and the Chain of Trust From Firmware to Kernel How each boot stage hashes the next into a TPM before executing it, why the measurements go into append-only PCRs, and what an attestation actually proves about a running system. operating systems