Merlijn Wajer - Trusted Boot on the Olimex OLinuXino LIME2
Channel: OpenFest Bulgaria
Date: 01/12/2016

We present a way to start up a Linux system on an Olimex OLinuXino LIME2 (or other Allwinner A10/A20) boards into a trusted state by ensuring that only trusted code is loaded and executed at boot time. This is achieved by means of a small extra hardware module, named the Trusted Boot Manager (TBM). The main goal of this TBM is to prevent permanent compromise of a system. This talk will discuss the technical details as well as threat models and scenarios, generally, but also specifically in the context of the Whitebox system - a secure and decentralised communications system provided to medical doctors.