Bootloader verification extension
Device verification extension technology obtains, in response to a request to verify a signature associated with first data, an asymmetric verifier application from off-device storage. The asymmetric verifier application is loaded and executed. The signature associated with the first data is verified using the asymmetric verifier application using asymmetric-key cryptography.
1. A verification extension method for a device, the method comprising:
obtaining, in response to a request to verify a signature associated with first data, an asymmetric verifier application from off-device storage;
loading the asymmetric verifier application obtained from the off-device storage;
prior to executing the asymmetric verifier application, verifying the asymmetric verifier application using a first hashing function and an initial asymmetric verifier application hash retrieved from on-device storage;
in response to positively verifying the asymmetric verifier application, executing the asymmetric verifier application;
verifying, using the asymmetric verifier application, the signature associated with the first data using asymmetric-key cryptography; and
in response to a positive or negative verification of the signature associated with the first data, unloading the asymmetric verifier application.
2. The verification extension method of claim 1 , wherein the signature associated with the first data is a signature of a hash of the first data.
3. The verification extension method of claim 1 , wherein the first data is a further application.
4. The verification extension method of claim 1 , wherein the asymmetric verifier application is verified using a master bootloader of the device.
5. The verification extension method of claim 1 , wherein the initial application hash is embedded on the device during manufacture or assembly of the device.
6. The verification extension method of claim 1 , wherein the asymmetric verifier application verifies the signature using one or more keys stored in on-device storage.
7. The verification extension method of claim 6 , wherein a plurality of keys are stored in on-device storage, wherein each of the keys is associated with a privilege level, and wherein restrictions associated with the privilege level of the key which verifies the signature associated with the first data are applied to that first data.
8. The verification extension method of claim 6 , wherein the one or more keys are embedded on the device during manufacture or assembly of the device.
9. The verification extension method of claim 1 , wherein the asymmetric verifier application verifies the signature using one or more keys embedded in the asymmetric verifier application.
10. The verification extension method of claim 1 , wherein a plurality of signatures corresponding to a plurality of data including the first data are verified using the asymmetric verifier application, and
wherein responsive to completion of the plurality of signatures being individually positively or negatively verified, the asymmetric verifier application is unloaded.
11. The verification extension method of claim 1 , wherein responsive to a positive verification of the signature associated with the first data, the first data is loaded.
12. The verification extension method of claim 1 , wherein the signature associated with the first data is a signature of a hash of the first data, and
wherein responsive to a positive verification of the signature associated with the first data, the hash of the first data is stored on the device.
13. The verification extension method of claim 12 , the method further comprising, after unloading the asymmetric verifier application:
obtaining the first data;
loading the first data; and
verifying, using the hash of the first data and a second hashing function, the first data.
14. The verification extension method of claim 13 , wherein responsive to positive verification of the first data, the first data is executed or made available for use by executable code, optionally wherein after the first data has been executed or made available for use by executable code the hash of the first data is removed from the device.
15. A non-transitory, computer-readable storage storing a computer program for controlling a device to perform the method of claim 1 .
16. An apparatus comprising:
processing circuitry to perform data processing; and
data storage storing a computer program for controlling the processing circuitry to perform the method of claim 1 .