UEFI Applications in U-Boot

During the last 2 years, U-Boot has grown support to execute UEFI applications such as grub or various BSD loaders.

This presentation will show you the progress of what is already working. It will show how far we're away from passing the official UEFI test suite and give you reasons why supporting UEFI binaries in embedded environments is useful.

Intel® Corporation –© 2018

UDK2018 Security Feature Roundup

Maggie Jauregui, Erik Bjorge and Brian Richardson

更多

Platform Armoring & Resiliency team

OSFC –September 2018

Researchers from Intel's Platform Armoring and Resiliency team will walk through the evolution of various firmware threat models as a result of the low-level skill advancement of software and hardware adversaries. In response, TianoCore added new in the UEFI Development Kit 2018 (UDK2018) release, along with enhancing existing security features.

This session provides real-world examples of several attack classes along with effective mitigation techniques against them. Topics include an introduction to platform security, an update on changes to the UEFI threat model, and a walkthrough of a critical Unified Extensible Firmware Interface (UEFI) security features (ex: HTTPS boot, pre-boot DMA protection using VT-d, guard page protection for potential stack/heap overflows).

收起

u-root and BMCs

by Christian Svensson 2018-09-14

u-root on BMCs

更多

The board management computer (BMC) is a component of the modern server allowing administrators to manage the server as if they were locally present. Over the recent years this component has come to be criticized for the many security issues that have surfaced, and until recently this component has been a very black box for the end-user. In this talk, we will briefly look on what the BMC does and how we can implement these features as part of the u-root Golang userland stack.

收起

U-Boot with Chrome OS and firmware packaging

Simon Glass

sjg@chromium.org

更多

Open Source Firmware Conference 2018

This talk covers chain-loading U-Boot on a Chromebook as well as experimental work on using U-Boot as the primary bootloader on eval boards such as Raspberry Pi (with verified boot). This provides a means to make use of Chrome OS's excellent vboot/update system, without needing to change over fully to the Chrome OS environment.

Part of this work builds on 'binman', a program used by U-Boot to build firmware images consisting of a number of 'entries' of different types. Binman is extensible, allowing new types of entries to be created easily. It is efficient, able to create complex images in O(#entries) time.

A demo will show U-Boot's sandbox environment running through the verified boot flow.

收起

U-Boot startup sequence

Status, Thoughts, Discussion

U-Boot Summit ELCE 2015

更多

Simon Glass, sjg@chromium.org

收起

coreboot on RISC-V — 2018 Edition

coreboot on RISC-V — 2018 Edition

Jonathan Neuschäfer

更多

OSFC 2018

收起

Journey from Closed to Open:

Lessons Learned from Open

Sourcing Sound Open Firmware

更多

Sound Open Firmware (SOF) is a permissive licensed open source audio DSP firmware and SDK that provides infrastructure and tools for audio DSP developers.

This presentation will tell the story of how Intel took a historically closed source firmware with a proprietary SDK and created an open source firmware with opensource SDK. It will also describe the technical and non-technical challenges that had to be overcome in releasing open source audio firmware and creating a free SDK.

Finally, the presentation will provide technical information about architecture, tooling and how to get involved.

Mission

1.Inspire others to open source firmware.

2.Show how firmware can be open sourced.

3.Discuss common challenges open sourcing firmware

and how to overcome them.

4.Introduce Sound Open Firmware (SOF) architecture.

收起

Simplifying the Use of Free and Upstream

Boot Software with Origami-Paper

Paul Kocialkowski

更多

contact@paulk.fr

Thursday September 13th 2018

收起