signed uboot script (boot.scr) authentication

[shufi]

Hi All,

I wanted to switch kernel and rootfs partition with uboot script instead of environment variable for security concerns.

So it is possible to authenticate(signature verification) of boot script first before execution, like we are authenticating kernel FIT image.

I have created a signed boot script similar to FIT image, so now I have a kernel FIT image and signed boot script.
Uboot can authenticate the kernel FIT image but how to authenticate signed boot.scr before FIT image.?

Thanks.

[shufi · Accepted solution]

Thanks @Yuri 
Yes, I already did this by modifying source command.

[Yuri]

@shufi 
Hello,

   generally it is possible to authenticate boot script  before execution, like kernel image,
but the script should be loaded to memory first. Perhaps U-boot command "source"
can be used here.

Regards,
Yuri.