Cryptosystem migration for secure boot sequences
An instruction to disable a first cryptographic key of a computing device is received by a processor of the device. The first cryptographic key is embedded in the device during manufacturing to facilitate a boot sequence of the device. The instruction is signed using a cryptographic signature. The first cryptographic key is associated with a first priority indicator. The cryptographic signature is verified using a second cryptographic key embedded in the device during manufacturing. The second cryptographic key is associated with a second priority indicator. The first priority indicator is compared with the second priority indicator. Responsive to determining that the second priority indicator supersedes the first priority indicator, the first cryptographic key is disabled.
1 . A method comprising:
receiving, by a processor of a device, an instruction to disable a first cryptographic key embedded in the device during manufacturing to facilitate a boot sequence of the device, wherein:
the boot sequence comprises a first boot stage and a second boot stage,
the instruction is received after the first boot stage from software associated with the second boot stage,
the first cryptographic key was embedded in the device to authenticate the second boot stage during the first boot stage,
the instruction is signed using a cryptographic signature, and
the first cryptographic key is associated with a first priority indicator;
verifying the cryptographic signature using a second cryptographic key embedded in the device during manufacturing, wherein the second cryptographic key is associated with a second priority indicator;
comparing the first priority indicator with the second priority indicator; and
responsive to determining that the second priority indicator supersedes the first priority indicator, disabling the first cryptographic key.
2 . The method of claim 1 , wherein the first priority indicator and the second priority indicator correspond to indices in an ordered list of cryptographic keys associated with a cryptographic set of operations.
3 . The method of claim 2 , wherein the first cryptographic key is a compromised cryptographic key.
4 . The method of claim 1 , wherein the first cryptographic key is associated with a first cryptographic set of operations and the second cryptographic key is associated with a second cryptographic set of operations.
5 . The method of claim 4 , wherein the first cryptographic set of operations is associated with a first resource consumption intensity metric and the second cryptographic set of operations is associated with a second resource consumption intensity metric, and wherein the second resource consumption intensity metric is greater than the first resource consumption intensity metric.
6 . The method of claim 4 , wherein the first priority indicator corresponds to a trust level of the first cryptographic set of operations and the second priority indicator corresponds to a trust level of the second cryptographic set of operations.
7 . The method of claim 6 , wherein the first cryptographic set of operations is associated with a security vulnerability determination of a cryptographic standards organization.
8 . The method of claim 1 , wherein disabling the first cryptographic key comprises programming a one-time programmable revocation bit associated with the first cryptographic key.
9 . The method of claim 1 , wherein the instruction is received via an over-the-air update associated with the software.
10 . The method of claim 1 , wherein the second cryptographic key was embedded in the device during manufacturing to facilitate the boot sequence of the device.
11 . A system comprising:
a memory; and
one or more processing units coupled to the memory, the one or more processing units to:
receive an instruction to disable a first cryptographic key embedded in the system during manufacturing to facilitate a boot sequence of the system, wherein:
the boot sequence comprises a first boot stage and a second boot stage,
the instruction is received after the first boot stage from software associated with the second boot stage,
the first cryptographic key was embedded in the system to authenticate the second boot stage during the first boot stage,
the instruction is signed using a cryptographic signature, and
the first cryptographic key is associated with a first priority indicator;
verify the cryptographic signature using a second cryptographic key embedded in the system during manufacturing, wherein the second cryptographic key is associated with a second priority indicator;
compare the first priority indicator with the second priority indicator; and
responsive to determining that the second priority indicator supersedes the first priority indicator, disable the first cryptographic key.
12 . The system of claim 11 , wherein the first priority indicator and the second priority indicator correspond to indices in an ordered list of cryptographic keys associated with a cryptographic set of operations.
13 . The system of claim 12 , wherein the first cryptographic key is a compromised cryptographic key.
14 . The system of claim 11 , wherein the instruction is received via an over-the-air update associated with the software.
15 . The system of claim 11 , wherein the second cryptographic key was embedded in the system during manufacturing to facilitate the boot sequence of the system.
16 . A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to perform operations comprising:
receiving an instruction to disable a first cryptographic key embedded in the processing device during manufacturing to facilitate a boot sequence of the processing device, wherein:
the boot sequence comprises a first boot stage and a second boot stage,
the instruction is received after the first boot stage from software associated with the second boot stage,
the first cryptographic key was embedded in the processing device to authenticate the second boot stage during the first boot stage,
the instruction is signed using a cryptographic signature, and
the first cryptographic key is associated with a first priority indicator;
verifying the cryptographic signature using a second cryptographic key embedded in the processing device during manufacturing, wherein the second cryptographic key is associated with a second priority indicator;
comparing the first priority indicator with the second priority indicator; and
responsive to determining that the second priority indicator supersedes the first priority indicator, disabling the first cryptographic key.
17 . The non-transitory computer-readable storage medium of claim 16 , wherein the first cryptographic key is associated with a first cryptographic set of operations and the second cryptographic key is associated with a second cryptographic set of operations.
18 . The non-transitory computer-readable storage medium of claim 17 , wherein the first cryptographic set of operations is associated with a first resource consumption intensity metric and the second cryptographic set of operations is associated with a second resource consumption intensity metric, and wherein the second resource consumption intensity metric is greater than the first resource consumption intensity metric.
19 . The non-transitory computer-readable storage medium of claim 17 , wherein the first priority indicator corresponds to a trust level of the first cryptographic set of operations and the second priority indicator corresponds to a trust level of the second cryptographic set of operations.
20 . The non-transitory computer-readable storage medium of claim 19 , wherein the first cryptographic set of operations is associated with a security vulnerability determination of a cryptographic standards organization.