Abstract: Systems and techniques are described herein for image authentication for secure boot. For example, a process the image authentication can include: receiving, a request to load an image during a secure boot process; performing, at the secure entity, a secure boot configuration action set in response to receiving the request; requesting the image from a storage device; transmitting the image to a cryptographic hardware component; obtaining, at the cryptographic hardware component, a digest corresponding to at least a portion of the image; storing the digest in the secured register of the cryptographic hardware component; storing the image in a secured memory device portion; obtaining, at the secure entity, a previously calculated digest corresponding to the image from the secured memory device portion; obtaining, at the secure entity, the digest from the secured register; and performing a comparison to determine whether the digest and the previously calculated digest match.

Abstract: Systems and techniques are described herein for image authentication for secure boot. For example, a process the image authentication can include: receiving, a request to load an image during a secure boot process; performing, at the secure entity, a secure boot configuration action set in response to receiving the request; requesting the image from a storage device; transmitting the image to a cryptographic hardware component; obtaining, at the cryptographic hardware component, a digest corresponding to at least a portion of the image; storing the digest in the secured register of the cryptographic hardware component; storing the image in a secured memory device portion; obtaining, at the secure entity, a previously calculated digest corresponding to the image from the secured memory device portion; obtaining, at the secure entity, the digest from the secured register; and performing a comparison to determine whether the digest and the previously calculated digest match.