Embedded systems protection?

Henrik Brix Andersen henrik at brixandersen.dk
Fri Jun 15 12:25:47 UTC 2007


On Fri, Jun 15, 2007 at 01:34:49PM +0200, Karl Sjödahl - dunceor wrote:
>  One way that is popular is to use a OTP flash with a cert inside that
>  you verify to see if something has changed.

How will that protect from copying? The contents of the flash can
still be read.

One solution, which I have used earlier, is to have a small bootloader
in internal flash which then loads, verifies and decrypts the main
application (which has been encrypted) from external flash. The key
point here is to make sure the internal flash can not be read out by
any means.

Regards,
Brix
-- 
Henrik Brix Andersen <henrik at brixandersen.dk>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 209 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-embedded/attachments/20070615/8ce1baf7/attachment.pgp


More information about the freebsd-embedded mailing list