Android Verified Boot 2.0 and U-boot
summary
Integration of Android Verified Boot 2.0 into U-boot is already functional at the library level: libavb-style libraries run in U-Boot, verify vbmeta and boot images, and push device state and verification metadata to the kernel. Three callbacks for rollback index and secure storage remain; the plan is to implement a Trusty/TEE client and a TEE supplicant so rollback indices live in the RPMB partition via the TEE. Patches are under review and verification runs before any partition reads.
AI-written summary · about
chapters (5)
- 0:00Introduction to AVB and U-Boot
- 7:12AVB integration in U-Boot
- 15:14Trusted Execution Environment integration
- 23:48AVB slot and future work
- 37:55Q&A session
related talks
28mAndroid boot verification to ensure integrity of OS and parti…
48mVerified Boot on ARM
42mPractical Application of Verified Boot
48mVerified Boot on Chrome OS and How to do it yourself- 42mPractical Application of Verified Boot
39mSecuring firmware: Secure and Trusted boot in OpenBMC
46mEnhancing System Security by Integrating Zephyr Bootloader and MCUboot
49mSecure Boot from A to Z