Hi Igor, Thank you for the patch.
On Mon, Jul 27, 2026 at 19:14, Igor Opaniuk <[email protected]> wrote: > AVB's whole chain of trust reduces to a single public key, and that key is > currently hard-coded in U-Boot as the AVB reference/test key, whose private > half is public. That is fine for bring-up but unusable for a locked > product, which must anchor its root of trust in something an attacker > cannot swap out -- a hash fused into the SoC, a secure element -- rather > than a blob compiled into the bootloader. > > Make the source of the trusted key digest selectable so a board can decide > where its root of trust lives, without touching the verification logic and > with any lookup failure treated as untrusted. The built-in key remains the > default, so existing users are unaffected; the sources a production device > actually needs are added in the following patches. > > Signed-off-by: Igor Opaniuk <[email protected]> Reviewed-by: Mattijs Korpershoek <[email protected]> > ---
