Only had time to skim it, but even without all the details it is an excellent overview of the state of the art regarding secure boot chain. You can learn many o

Only had time to skim it, but even without all the details it is an excellent overview of the state of the art regarding secure boot chain. You can learn many of the points by looking into the Android boot sequence but this is a more generic and 'everything in a single place' write-up. Especially the mechanisms behind dm-verity seem to be not widely known and - in my view- underappreciated. > *This is all so desktop/laptop focused, what about servers? I know that some of the more powerful and Linux based automotive embedded systems use a similar design. While important for desktop/laptop and servers the mentioned points are crucial for systems where physical security of the hardware is limited. Oh, and BTW, if 0pointer.net i doesn't ring a bell: The author is Lennart Poettering.