OSFC 2019 - The future of firmware verification in coreboot

This talk was held at 9elements Cyber Security's Open Source Firmware Conference in Silicon Valley.

Presenter: Julius Werner
Abstract:
In this lightning talk I will present a draft proposal for new firmware verification infrastructure in coreboot that has been circulating between Google and Intel. Unlike the existing all-or-nothing one-shot verification, this proposal will hash each CBFS file individually and verify them at time of use. It also contains a plan to move the root of trust into the bootblock and verify every stage from there on out, so that we can tie it to an SoC hardware verification scheme like BootGuard.

WEBSITE: https://osfc.io
TWITTER: https://twitter.com/osfc_io
FACEBOOK: https://facebook.com/osfc.io
PAPER: https://2019.osfc.io/talks/the-future-of-firmware-verification-in-coreboot.html
ORGANIZER: https://9esec.io

Видео OSFC 2019 - The future of firmware verification in coreboot канала Open Source Firmware Conference