公开(公告)号：US10248428B2

公开(公告)日：2019-04-02

申请号：US15300086

申请日：2014-04-28

Applicant: INTEL CORPORATION

Inventor： Karunakara Kotary ,  Nicholas J. Yoke ,  Brett P. Wang ,  Genliu Xing

IPC: G06F9/4401 ,  G06F21/57 ,  G06F21/72 ,  G06F3/06 ,  G06F12/14 ,  H04L9/32

Abstract: Technologies for securely booting a computing device includes a security engine of the computing device that consecutively determines a hash value for each block of initial boot firmware and generates an aggregated hash value from the hash value determined for each of the blocks. A processor of the computing device determines whether the aggregated hash value matches a reference checksum value. Initialization of the processor is completed in response to a determination that the aggregated hash value matches the reference checksum value. In some embodiments, the security engine consecutively retrieves each block of the initial boot firmware from a memory of the computing device, stores each retrieved block in a secure memory of the security engine, and determines the hash value for each stored block. Each block stored in the secure memory is copied to a portion of a cache memory of the processor initialized as Cache as RAM.