Support of signing and validation mechanism of kernel and filesystems in stm32mp157f-eval board

[Pratik Manvar]

Hi STM-Team,

I am working with STM32MP157F-Eval board. I have enabled and tested secure-boot flow as per https://wiki.st.com/stm32mpu/wiki/STM32MP15_ROM_code_secure_boot.

Now, I am looking for next security part for singing-verification of kernel & DTB images and some mechanism of filesystem integrity checking (e.g. dm-verity) at every boot-up in stm32mp1 series board.

I do not see any reference for this part. Can anyone help me with any reference document to implement these stuff on stm32mp1 series boards?

Thanks & Regards,

Pratik Manvar

[Olivier GALLIEN]

Hi @Pratik Manvar​ 

ST provide solution and guideline for trusted boot-chain up to FIP.

Security overview - stm32mpu

For Kernel we rely on generic Linux services.

Olivier