EFIBootGuard for CIP and SecureBoot

Hi Daniel,

We will be conducting a UEFI gap analysis to support EFIBootGuard in U-Boot.

As we are working on UEFI SecureBoot implementation in U-Boot, how do you expect the boot process to be secured? Would U-Boot UEFI SecureBoot verify EFIBootGuard signature and in turn EFIBootGuard will check either grub or Linux signature?

Please elaborate on your vision of a secured boot process.

Cheers

FF

PS: you may want to subscribe to the boot-architecture mailing list in Linaro.