trezor-firmware icon indicating copy to clipboard operation
trezor-firmware copied to clipboard

boardloader-bootloader-firmware reverse crosscheck

Open prusnak opened this issue 6 years ago • 3 comments

T1 firmware checks bootloader hash against the known whitelist, see https://github.com/trezor/trezor-mcu/blob/9afaeff36ff891ab9dbe48b0f514a273975f8cd0/firmware/bl_check.c#L29-L46

Maybe we should do the same for T2, that is:

  • bootloader checks the boardloader hash against the whitelist
  • firmware checks the bootloader hash against the whitelist

prusnak avatar Sep 26 '18 14:09 prusnak