公开(公告)号：EP3138040A4

公开(公告)日：2017-12-13

申请号：EP14890700

申请日：2014-04-28

Applicant: INTEL CORP

Inventor： KOTARY KARUNAKARA ,  YOKE NICHOLAS J ,  WANG BRETT P ,  XING GENLIU

IPC: G06F21/57 ,  G06F3/06 ,  G06F9/44 ,  G06F12/14 ,  G06F21/72 ,  H04L9/32

CPC classification number: G06F9/4401 ,  G06F3/0619 ,  G06F3/065 ,  G06F3/068 ,  G06F12/1408 ,  G06F21/575 ,  G06F21/72 ,  G06F2212/1052 ,  H04L9/3242

Abstract: Technologies for securely booting a computing device includes a security engine of the computing device that consecutively determines a hash value for each block of initial boot firmware and generates an aggregated hash value from the hash value determined for each of the blocks. A processor of the computing device determines whether the aggregated hash value matches a reference checksum value. Initialization of the processor is completed in response to a determination that the aggregated hash value matches the reference checksum value. In some embodiments, the security engine consecutively retrieves each block of the initial boot firmware from a memory of the computing device, stores each retrieved block in a secure memory of the security engine, and determines the hash value for each stored block. Each block stored in the secure memory is copied to a portion of a cache memory of the processor initialized as Cache as RAM.