24 Apr
2019
24 Apr
'19
7:56 p.m.
Am 24.04.2019 um 15:55 schrieb Linder Pascal:
Hello everyone,
I want to add some supplementary security to my embedded system. The Flattened Image Tree (FIT) to secure the operating system and the device tree, I have already found. Now, I am wondering if I could also secure U-Boot itself before starting it by the Secondary Program Loader (SPL). Does anyone knows a method to do that?
Just as U-Boot can load Kernel + DTS as FIT, SPL can load U-Boot as FIT. See CONFIG_SPL_LOAD_FIT. This FIT containing U-Boot + its DTS can then be verified, too.
Regards, Simon