topic Re: signed uboot script (boot.scr) authentication in i.MX Processors

signed uboot script (boot.scr) authentication

shufi — Mon, 06 Sep 2021 18:58:49 GMT

Hi All,

I wanted to switch kernel and rootfs partition with uboot script instead of environment variable for security concerns.

So it is possible to authenticate(signature verification) of boot script first before execution, like we are authenticating kernel FIT image.

I have created a signed boot script similar to FIT image, so now I have a kernel FIT image and signed boot script.
Uboot can authenticate the kernel FIT image but how to authenticate signed boot.scr before FIT image.?

Thanks.

Re: signed uboot script (boot.scr) authentication

Yuri — Thu, 16 Sep 2021 05:04:26 GMT

@shufi
Hello,

generally it is possible to authenticate boot script before execution, like kernel image,
but the script should be loaded to memory first. Perhaps U-boot command "source"
can be used here.

Regards,
Yuri.

Re: signed uboot script (boot.scr) authentication

shufi — Thu, 16 Sep 2021 11:45:42 GMT

Thanks @Yuri
Yes, I already did this by modifying source command.