4 ms·

> Secure boot is nice optional protection, but real security comes from ability of the platform to reliably boot from known good media Which is exactly what (U

> Secure boot is nice optional protection, but real security comes from ability of the platform to reliably boot from known good media Which is exactly what (UEFI) Secure Boot usually aims to assist. I mean... One can complain how it tries to achieve that, but either you realize it or not, you are seemingly in full agreement with the overall design-goal of Secure Boot.

megous 6y ago
As long as in-device firmware is modifiable and the protection relies on lack of bugs in its implementation, then I'm not in agreement. What I have in mind is just a fixed boot order enforced by firmware stored in ROM, where external storage takes priority, and where you can easily control external storage. (as easy as inserting a uSD card) All the TF-A, bootloader, kernel is loaded from the external storage, so no software at all is loaded from any modifiable storage that's part of the device itself, if you don't want to. Any attacker made changes to the software on the storage inside the device would be irrelevant. Such setup seems much better than having to assume no bugs in existing firmware or HW related to secure boot, etc.