Re: [PATCH 1/4] avb: make the AVB root key source pluggable

Hi Igor,

Thank you for the patch.

On Mon, Jul 27, 2026 at 19:14, Igor Opaniuk <[email protected]> wrote:

> AVB's whole chain of trust reduces to a single public key, and that key is
> currently hard-coded in U-Boot as the AVB reference/test key, whose private
> half is public. That is fine for bring-up but unusable for a locked
> product, which must anchor its root of trust in something an attacker
> cannot swap out -- a hash fused into the SoC, a secure element -- rather
> than a blob compiled into the bootloader.
>
> Make the source of the trusted key digest selectable so a board can decide
> where its root of trust lives, without touching the verification logic and
> with any lookup failure treated as untrusted. The built-in key remains the
> default, so existing users are unaffected; the sources a production device
> actually needs are added in the following patches.
>
> Signed-off-by: Igor Opaniuk <[email protected]>

Reviewed-by: Mattijs Korpershoek <[email protected]>

> ---