Hello, I'm trying to make secure boot enabling seamless experience. For this the plan is to use:
- flashrom to update eeprom
- vcgencmd to update OTP including Public Key and all the flags
I've made a difference between otp_dump output before and after secure boot enablement:The public key is this:but according to this: https://www.raspberrypi.com/documentati ... efinitions
the changes should be in:
47-54 SHA256 of RSA public key for secure-boot
Also, it is stated that only SHA256 digit is stored there, but I've tried to convert public key in der, pem, binary - nothing corresponds to sha stored in that changed registries.
Basically the question is - how to set public key so that eeprom in rpi5 would boot after signed eeprom flashed with flashrom?
- flashrom to update eeprom
- vcgencmd to update OTP including Public Key and all the flags
I've made a difference between otp_dump output before and after secure boot enablement:
Code:
diff otp_dump otp_dump_secureboot23c23< 21:00000000---> 21:0c00000039,46c39,46< 37:00000000< 38:00000000< 39:00000000< 40:00000000< 41:00000000< 42:00000000< 43:00000000< 44:00000000---> 37:8fdaf2b0> 38:415a04e6> 39:05004dd1> 40:ee6879c1> 41:f1bfcdcf> 42:28088f4f> 43:9e80bd83> 44:98eb716bCode:
-----BEGIN PUBLIC KEY-----MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W4SJSHw4NPkkdIZzXjRSBq0VD15iaYyHptAVptrZYoNy2BZefSOkRcAd4jQD+xzXO1t2HgIJXV37wkZbcRDI0Bk1V/By902eFRLP5LHi/V7wTSt0R6+ZJstczaZw47NCN/gfGu/IgXNOIlZqSUie1rykppkYk5iwTcDdeB0L3/Aabsok/ecKhKc3vgqRsEzg3+fyCjUngKkr1TN4yH/bknXE4apo5WXZRD+3n7Ie3qYbcfo04+C/vV2hE9CkeLJ/4OBXnDJo+ATvcRCKm32m4PIaNAvkKK/ZMUW9q0iJVEZFsTdfnQ262Eh6j47iQ9trRWpiGR/JPcSbLPiGy0gnQIDAQAB-----END PUBLIC KEY-----the changes should be in:
47-54 SHA256 of RSA public key for secure-boot
Also, it is stated that only SHA256 digit is stored there, but I've tried to convert public key in der, pem, binary - nothing corresponds to sha stored in that changed registries.
Basically the question is - how to set public key so that eeprom in rpi5 would boot after signed eeprom flashed with flashrom?
Statistics: Posted by onorua — Thu Dec 19, 2024 2:21 pm