Hi Igor,

Thank you for the patch.

On Mon, Jul 27, 2026 at 19:14, Igor Opaniuk <[email protected]> wrote:

> The strongest anchor for the root of trust is a key hash burned into
> hardware (OTP/eFuse), which is inherently SoC-specific and cannot live in
> common code. Give boards a hook to supply it from wherever their hardware
> keeps it.
>
> The default is deliberately fail-closed: a board that has not wired up a
> provider refuses verification rather than silently trusting whatever key it
> is handed. A misconfiguration should stop the boot, not quietly weaken it.
>
> Signed-off-by: Igor Opaniuk <[email protected]>

Reviewed-by: Mattijs Korpershoek <[email protected]>

> ---

Reply via email to