#secure-boot

Secure Boot: how a device trusts its own code

“If the check that decides 'is this code mine?' lives in rewritable flash, an attacker just rewrites the check. The root of trust has to be something no software can touch.”