bunnie 0c690d8be4 add boot1 pubkey integrity checking ... this should erase the secret keys if the boot1 pubkeys don't match this enables OEM-signed boot1 images. the policy is that all OEM images signed by baochip are considered to be untrusted, and thus loading them onto a device would wipe any secret keys, making them less useful for extracting secrets. There are 2048 keys and about 500 keys are used by baochip, so there are still plenty of keyslots available for OEMs to use to implement their own version of security.		2025-12-19 01:14:51 +08:00
..
src	add boot1 pubkey integrity checking	2025-12-19 01:14:51 +08:00
Cargo.toml	commit for version bump	2025-12-16 02:02:37 +08:00