Embedded Linux Conference Europe has ended
Back To Schedule
Thursday, October 24 • 2:00pm - 2:50pm
Verified Boot on Chrome OS and How to do it yourself - Simon Glass, Google

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Chrome OS uses a first stage read-only firmware and second-stage updatable firmware. The updatable firmware is signed and contains kernel keys and a dm-verify hash, so that the firmware, Linux kernel and root filesystem are all protected against corruption and attack. This system is described and discussed. As part of Google's upstream efforts in U-Boot, a generalized secure boot system has been developed and released with U-Boot 2013.07. This implementation uses the FIT format, which collects together images, such as kernels, device tree, RAM disks. Support is provided for TPMs (Trust Platform Module), RSA-based signing and verificaiton, and hashing with hardware acceleration. This system is also described and discussed, along with the specific steps needed to implement it in your designs.

avatar for Simon Glass

Simon Glass

Software Engineer, Google, Inc
Simon Glass has worked in embedded systems for many years, at ARM, Bluewater Systems (which he founded) and Google. In his spare time, Simon is a contributor to U-Boot and is custodian of its driver model. He works on new Chromebook developments in Boulder, Colorado.

Thursday October 24, 2013 2:00pm - 2:50pm BST

Attendees (0)