Re: [U-Boot] Secure update of uboot devices?

2013-01-08 Thread Simon Glass
Hi Andreas, On Sat, Mar 17, 2012 at 2:25 AM, Andreas Bäck wrote: > Hello > > Our linux boxes with Uboot and frescale mpc5200B are set at production with > software and that is no problem. > But then when the need to update software afterwards in the field is today > only so simple that if uboot f

Re: [U-Boot] Secure update of uboot devices?

2012-03-17 Thread Andreas Bäck
Hello Our linux boxes with Uboot and frescale mpc5200B are set at production with software and that is no problem. But then when the need to update software afterwards in the field is today only so simple that if uboot finds a usb stick with a file uImage then it will start that and do all the upd

Re: [U-Boot] Secure update of uboot devices?

2012-01-06 Thread Kim Phillips
On Fri, 30 Dec 2011 13:37:47 +0100 Wolfgang Denk wrote: > Dear Andreas, > > In message > you > wrote: > > > > sha1sum sum is yes enough to verify that no files have been modified on the > > file system on the already installed Linux device. > > It is also good enough to ensure that the files

Re: [U-Boot] Secure update of uboot devices?

2012-01-06 Thread Wolfgang Denk
Dear =?ISO-8859-1?Q?Andreas_B=E4ck?=, In message you wrote: > > Actually there seams to exsist some very old patches for this > http://lists.denx.de/pipermail/u-boot/2006-September/016960.html > > Here a paper quite exact what I am after: > http://elinux.org/images/2/28/Trusted_Boot_Loader.pdf

Re: [U-Boot] Secure update of uboot devices?

2012-01-06 Thread Mike Frysinger
On Friday 06 January 2012 06:24:50 Andreas Bäck wrote: > Actually there seams to exsist some very old patches for this > http://lists.denx.de/pipermail/u-boot/2006-September/016960.html > > Here a paper quite exact what I am after: > http://elinux.org/images/2/28/Trusted_Boot_Loader.pdf > > Is th

Re: [U-Boot] Secure update of uboot devices?

2012-01-06 Thread Andreas Bäck
Actually there seams to exsist some very old patches for this http://lists.denx.de/pipermail/u-boot/2006-September/016960.html Here a paper quite exact what I am after: http://elinux.org/images/2/28/Trusted_Boot_Loader.pdf Is there any toughts on integating this in trunk or should I try to merge

Re: [U-Boot] Secure update of uboot devices?

2012-01-02 Thread Wolfgang Denk
Dear Andreas, please always keep the mailing list on Cc: In message you wrote: > > Actually what i think I am after is authentication of uboot that have > somewhat been discussed before in > http://www.mail-archive.com/u-boot-users@lists.sourceforge.net/msg04707.html > > But I can't find if it

Re: [U-Boot] Secure update of uboot devices?

2011-12-30 Thread Wolfgang Denk
Dear Andreas, In message you wrote: > > sha1sum sum is yes enough to verify that no files have been modified on the > file system on the already installed Linux device. It is also good enough to ensure that the files on any distribution media have not been corrupted or modified in some way. Of

Re: [U-Boot] Secure update of uboot devices?

2011-12-30 Thread Andreas Bäck
sha1sum sum is yes enough to verify that no files have been modified on the file system on the already installed Linux device. But my case here is if one need to update the software on the device out somewhere in the world we have now made a usb stick and uboot looks for special files first on the

Re: [U-Boot] Secure update of uboot devices?

2011-12-28 Thread Marek Vasut
> With the new threats like Stuxnet and Duqu one need to improve on how new > updates to software is distrubuted to devcies so one can > be sure that it's not a hacked or modified software that runs in the > device. We use uboot + usb stick to update the software in our devices. > Have anyone been

[U-Boot] Secure update of uboot devices?

2011-12-28 Thread Andreas Bäck
With the new threats like Stuxnet and Duqu one need to improve on how new updates to software is distrubuted to devcies so one can be sure that it's not a hacked or modified software that runs in the device. We use uboot + usb stick to update the software in our devices. Have anyone been trying out