RE : Authenticating yocto rootfile system

[khaleel]

Hello

Currently i'm working on secure boot. I need to authenticate the rootfilesystem (yocto). 

Please provide me, if any documentations/procedures available.

Thanks & Regards

khaleel

[igorpadykov · Accepted solution]

Hi khaleel

one can look at tutorial on

https://www.timesys.com/security/secure-boot-encrypted-data-storage/

Secure appnotes on below link, like AN12714 i.MX Encrypted Storage Using CAAM Secure Keys

https://www.nxp.com/products/processors-and-microcontrollers/arm-processors/i-mx-applications-proces...

Best regards
igor

[khaleel]

Hi igor,

Thank you very much for the documentation.

As of now i'm only trying to Authenticate rootfile sytem using dm-verity and i don't want to Encrypt it.

Mostly dm-verity is used in Android devices, As it is kernel’s device mapper module i believe it should support for linux device  too. 

I didn't find a document implementing dm-verity to verify linux rootfile system. If you have a procedure please share with me. 

Regards

Khaleel

[imx8-mdt]

@khaleel 

have you implemented the dm-verity on linux ,rather than Android?

I face the same task as you.

Is there any documents to refer to?

[igorpadykov]

Hi Khaleel

unfortunately I am not aware of other documents, except provided on above link.

Best regards
igor