wolfBoot boots signed Linux on the AMD Versal adaptive SoC, replacing U-Boot in the boot chain. Recent work adds support for DDR apertures above 1 TB, keeps a device tree’s own kernel command line intact, and boots gzip compressed kernels straight from a signed FIT image. The Versal family combines dual Arm Cortex-A72 application processors, […]
Read MoreMore TagCategory: wolfBoot
wolfBoot Secure Boot for the Nuvoton NuMaker M2354
wolfBoot now supports the Nuvoton NuMaker-M2354, a development board built on the NuMicro M2354, a Cortex-M23 microcontroller with TrustZone. Signed firmware is verified before it runs, and firmware updates are verified before they are installed. About the chip The NuMicro M2354 is a Cortex-M23 microcontroller built for security: 96 MHz, 1 MB of flash in […]
Read MoreMore TagwolfBoot Secure Boot on the NXP i.MX 8QuadMax
wolfBoot now runs on the NXP i.MX 8QuadMax MEK as BL33, taking the place of U-Boot inside the NXP boot container. The i.MX 8QuadMax is used in automotive, industrial and medical designs, where the boot chain often has to be auditable, and this puts a small bootloader that checks a signature in the last position […]
Read MoreMore TagwolfBoot SD Card support for NXP LS1028A
wolfBoot now boots a signed application from an SD card on the NXP LS1028A, so the boot image lives on removable storage instead of NOR flash. Booting from the card Loads the signed image over the on chip eSDHC controller and verifies it before handing over control. Uses A/B partitions on a GPT or MBR […]
Read MoreMore TagwolfBoot now supports booting FAT32 and ext4 Filesystems
wolfBoot can now read a signed firmware image from a file on a filesystem. This applies to the disk boot path, which covers SD cards, eMMC, SATA and NVMe targets. The feature is read only, optional, and off by default. What it does wolfBoot has supported MBR and GPT partition tables on disk targets for […]
Read MoreMore TagwolfBoot Adds Secure Boot Support for Altera Agilex 5
wolfSSL is adding a native wolfBoot port for the Altera Agilex 5 SoC FPGA. The port integrates with the existing Agilex 5 platform boot flow and verifies signed Linux FIT images before they are launched. This gives Agilex 5 platforms a portable wolfSSL secure boot layer without replacing the vendor’s platform initialization or security services. […]
Read MoreMore TagwolfBOOT and wolfHSM Yocto Recipes
The wolfBoot recipes in the meta-wolfssl (https://github.com/wolfSSL/meta-wolfssl) Yocto layer can now build wolfCrypt from a wolfSSL source tree you supply. Set `WOLFBOOT_WOLFSSL_SRC = “/path/to/wolfssl”` in `local.conf` and that tree is used in place of the copy the recipe would otherwise fetch into `lib/wolfssl`. The wolfSSL entry drops out of `SRC_URI` entirely, so nothing is downloaded. […]
Read MoreMore TagIntroducing wolfTrust
wolfTrust is a trusted firmware platform for Arm Cortex-M, now under development at wolfSSL, that brings the full wolfSSL security stack into a single secure runtime. It implements the Arm Firmware Framework for M (FF-M) with source-compatible PSA client interfaces, so applications written for Trusted Firmware-M (TF-M) keep their psa_* calls and simply swap the […]
Read MoreMore TagwolfBoot comes to the TI C2000 C28x
wolfBoot, our secure bootloader, now runs on the Texas Instruments C2000 C28x DSP. We brought it up on the LAUNCHXL-F28P55X (TMS320F28P550SJ, 150 MHz). It boots the board directly from flash on a bare power-up, with no debugger attached, and it verifies a signed application before that application ever runs. C2000 parts are the workhorses of […]
Read MoreMore TagBare-Metal Secure Boot on the NVIDIA Jetson Orin with wolfBoot
wolfBoot now runs as bare-metal firmware on the NVIDIA Jetson Orin (Tegra234), replacing the vendor UEFI stage entirely and extending the SoC’s hardware root of trust to the operating system through a small, auditable verifier. The Jetson Orin boot chain The Orin boots a fused, signed chain: BootROM to MB1 to MB2 to ARM Trusted […]
Read MoreMore Tag