[Secure boot] Is it possible to add kernel authentication?

[AVazquez]

Hi,all!

In the wiki about secure boot, only FSBL and SSBL files are signed and authenticated.

It would be very interesting and useful if you could also sign and authenticate the kernel and increase security.

Is this possible?

[Olivier GALLIEN · Accepted solution]

Hi @AVazquez​ ,

It's possible to authenticate any level of application code but ST only provide complete support/guideline for Secure Boot part.

Authentication of kernel and upper layer can be done using standard community methodology.

2 Kbytes in the OTP register are available to store extra keys.

Olivier

[AVazquez]

Perfect!

Thanks!