Information processing apparatus and control method for information processing apparatus
An information processing apparatus verifies, by using a fact that a first encryption scheme is supported and a second encryption scheme is not supported, whether or not a first signature corresponding to the first encryption scheme is valid, verifies, by using a fact that the first encryption scheme is not supported and the second encryption scheme is supported, whether or not a second signature corresponding to the second encryption scheme is valid, and executes, when the first signature or the second signature is verified to be valid, a program.
1. An information processing apparatus comprising:
a storage device configured to store a program including at least a first signature generated by using a first encryption scheme and at least a second signature generated by using a second encryption scheme; and
a controller having one or more processors which execute instructions stored in one or more memories, the controller being configured to:
specify whether a second controller that is different from the controller is configured in the information processing apparatus,
verify, in a case where it is specified that the second controller is not configured in the information processing apparatus, whether or not the first signature corresponding to the first encryption scheme is valid,
wherein the second controller verifies, in a case where it is specified that the second controller is configured in the information processing apparatus, whether or not the second signature corresponding to the second encryption scheme is valid, and
execute, when the first signature or the second signature is verified to be valid, the program.
2. The information processing apparatus according to claim 1 , further comprising:
a second storage device configured to store a verification program to be executed by the controller and key information to be used in executing the verification program, the second storage device that is different from the storage device,
wherein the controller performs verification by using the verification program and the key information.
3. The information processing apparatus according to claim 2 , wherein the second controller is configured to verify a second program that is different from the program and includes the verification program.
4. The information processing apparatus according to claim 2 , wherein the second controller connects a third storage device that is different from the storage device and the second storage device and that includes the second program and information of the second signature, and wherein the second controller supports the first encryption scheme.
5. The information processing apparatus according to claim 3 , wherein the second program is a basic input/output system (BIOS) program.
6. The information processing apparatus according to claim 1 , wherein the program includes information about a supported encryption scheme, and
wherein the controller
determines which encryption scheme the information about the supported encryption scheme is.
7. The information processing apparatus according to claim 1 , wherein the storage device stores specific information of the information processing apparatus, and information about an encryption scheme corresponding to the specific information.
8. The information processing apparatus according to claim 7 , wherein the controller
acquires the specific information of the information processing apparatus, and
determines which encryption scheme an encryption scheme corresponding to the acquired specific information is.
9. The information processing apparatus according to claim 8 , wherein the controller makes an error determination by determining that the acquired specific information is not stored in the storage device.
10. The information processing apparatus according to claim 1 , wherein the program is a Loader.
11. The information processing apparatus according to claim 1 , wherein the program is a Kernel.
12. The information processing apparatus according to claim 1 , wherein the first encryption scheme is Rivest-Shamir-Adleman (RSA) 3072, and
wherein the second encryption scheme is RSA 2048.
13. A control method for an information processing apparatus including a storage device configured to store a program including at least a first signature generated by using a first encryption scheme and at least a second signature generated by using a second encryption scheme, and a controller configured to read a signature from the storage device and verify validity of the read signature, the control method comprising:
specifying whether a second controller that is different from the controller is configured in the information processing apparatus;
verifying, in a case where it is specified that the second controller is not configured in the information processing apparatus, whether or not the first signature corresponding to the first encryption scheme is valid;
wherein the second controller verifies, in a case where it is specified that the second controller is configured in the information processing apparatus, whether or not the second signature corresponding to the second encryption scheme is valid; and
executing, when the first signature or the second signature is verified to be valid, the program.