3 ms·
the eeprom is upgradable, someone can just reflash the eeprom and instruct it to ignore the public key in the OTP, thus render the whole crypto chain useless?
by synergy20 4y ago
the eeprom is upgradable, someone can just reflash the eeprom and instruct it to ignore the public key in the OTP, thus render the whole crypto chain useless?
- temptemptemp111 4y ago[dead]
- dividuum 4y agoI think that's what program_pubkey[1] is preventing. While you could still flash other EEPROMs, their then mandatory public key would not match the hash written to the OTP. [1] https://www.raspberrypi.com/documentation/computers/raspberry-pi.html#program_pubkey https://www.raspberrypi.com/documentation/computers/raspberr...
- section_me 4y agoThis isn't possible. The docs[1] state once revoke_devkey has been set, you can't upgrade to a bootloader not supporting secure-boot and downgrading is disabled. [1] https://github.com/raspberrypi/usbboot/blob/master/secure-boot-recovery/README.md#locking-secure-boot-mode https://github.com/raspberrypi/usbboot/blob/master/secure-bo...
- deleted 4y ago[deleted]