« previous next »
Pages: [1]

Author Topic: Validate installed firmware (eg. against officially signed firmware)  (Read 3818 times)

FlyingBlackbird

  • Full Member
  • ***
  • Posts: 102
  • Karma: +3/-0
    • View Profile
Validate installed firmware (eg. against officially signed firmware)
« on: February 11, 2020, 03:16:58 pm »
How could I check the integrity of the installed (flashed) firmware of a Blackbird (or Talos) eg. against the officially downloadable firmware files (which are cryptographically signed)?

https://wiki.raptorcs.com/wiki/Blackbird/Firmware

Logged

MPC7500

  • Hero Member
  • *****
  • Posts: 573
  • Karma: +40/-1
    • View Profile
    • Twitter
Re: Validate installed firmware (eg. against officially signed firmware)
« Reply #1 on: February 12, 2020, 08:14:33 am »
You can verify the firmware with Flashrom and a Bus Pirate. But there should be an easier solution. But sadly, that's all I can say.
Logged

FlyingBlackbird

  • Full Member
  • ***
  • Posts: 102
  • Karma: +3/-0
    • View Profile
Re: Validate installed firmware (eg. against officially signed firmware)
« Reply #2 on: February 12, 2020, 04:03:14 pm »
Quote from: MPC7500 on February 12, 2020, 08:14:33 am
You can verify the firmware with Flashrom and a Bus Pirate.

I have a CH341A device which is supported by the flashrom Linux program but I could not yet find instructions which parts of the memory are relevant for calculating the checksums and
also want to avoid removing the flash chips from the socket just to read them (perhaps this it not required since the flash update is possible from within OpenBMC but if OpenBMC is
compromised it could manipulate the reported checksum too).
Logged
Pages: [1]
« previous next »