Security & Root-of-Trust
OpenSMA authenticates what it runs and what it accepts. This section covers the root-of-trust and the secure-boot chain.
- vRoT & secure boot — the virtual root of trust and boot authentication. (deep-dive)
- Crypto & firmware parsing — the crypto primitives, debug tokens, and firmware-image parsers. (catalog)
| Subsystem | Path | Role |
|---|---|---|
| vRoT | src/nv/vrot/ |
Virtual root of trust, AP background copy |
| Secure boot | src/nv/secure_boot/ |
Boot authentication |
| Crypto | src/nv/crypto/ |
AES-GCM and helpers |
| Debug token | src/nv/debugtoken/ |
Debug-authorization TLVs |
| FW parser | src/nv/fw_parser/ |
AP/MCU firmware image parsing |