Firmware security key upgrade algorithm
A portion of a firmware program may be automatically upgraded during power on of a processor-based system. A firmware upgrade file signed by a private key is authenticated using a public key accessible to the firmware program. The authentication and upgrade is performed automatically. Interrupted upgrades are anticipated and resolved by the firmware program. The public key is duplicated and is itself upgradable, in case the private key changes. The firmware program may be locked to prevent both viewing and unauthorized upgrades of the public keys or other parts of the firmware program.
1. A method comprising:
identifying a firmware upgrade request by a firmware program;
retrieving a file signed with a private key;
validating the file with a public key;
upgrading a portion of the firmware program by the firmware program;
locking a device storing the firmware program such that a second portion of the firmware program is not readable;
validating the public key; and
retrieving a second public key from the firmware program if the public key is not valid.
2. The method of claim 1 , identifying a firmware upgrade request by a firmware program further comprising:
reading a flag, wherein the flag is located in a non-volatile medium; and
determining that the flag is set.
3. The method of claim 2 , further comprising:
deleting the file; and
clearing the flag.
4. The method of claim 1 , further comprising:
determining that the file is not authentic; and
locking the device.
5. The method of claim 1 , further comprising:
locking the device after upgrading a portion of the firmware program by the firmware program.
6. The method of claim 1 , wherein the second portion of the firmware program is a public key.
7. An article comprising a medium storing instructions for enabling a processor-based system to:
identify a firmware upgrade request by a firmware program;
retrieve a file signed with a private key;
validate the file with a public key;
upgrade a portion of the firmware program by the firmware program;
lock a device storing the firmware program such that the public key is not readable;
validate the public key; and
retrieve a second public key from the firmware program if the public key is not valid.
8. The article of claim 7 , further storing instructions that enable the processor-based system to:
determine that the file is not authentic; and
lock the device.
9. A method comprising:
identifying a firmware upgrade request by a firmware program;
retrieving a file signed with a private key;
validating the file with a public key;
upgrading a portion of the firmware program by the firmware program;
locking a device storing the firmware program such that a second portion of the firmware program is not readable;
validating the public key;
retrieving a second public key from the firmware program if the public key is not valid;
reading a flag, wherein the flag is located in a non-volatile medium;
determining that the flag is set;
deleting the file; and
clearing the flag.