Fast Secure Boot from Embedded Flash Memory

摘要

A technique that reduces the startup time of a processing system authenticates a proxy for an image stored in tracked memory instead of authenticating the image stored in the tracked memory. A controller generates an alteration log authentication code based on an alteration log that is updated prior to programming the image stored in tracked memory. The controller records an alteration log authentication code in secure memory. The alteration log is indirectly related to a most recent image stored in the tracked memory. Authentication of the image of the alteration log is used as a proxy for authentication of the image stored in tracked memory, which is performed only when the tracked memory is modified. Use of the contents of the alteration log as a proxy for the contents of tracked memory accelerates the startup time of the system.

主权项

1. A method comprising:
determining an alteration log authentication code based on contents of an alteration log associated with a tracked region of memory; and generating an indication of authentication of contents of the tracked region of memory based on a comparison of the alteration log authentication code to a stored alteration log authentication code.