Re: coreboot architecture with signed FSP

Absolutely true.

However, the EU CRA definition of "boot managers" as "important products 
with digital elements, Class I" says
"Software products with digital elements that manage the process of 
initial system startup after power on/restart by initialising hardware, 
loading or transferring control to the operating system environment or 
system resources, and selecting boot options. This category includes but 
is not limited to UEFI firmware, single-stage and multi-stage boot loaders."

Using that definition, coreboot is classified as "boot manager". This is 
a good thing because the CRA has envisioned mechanisms to provide 
support/funding to check and/or improve the security of products in this 
category.

Regards,
Carl-Daniel

Am 31.12.25 um 03:10 schrieb ron minnich:
> “Coreboot is not a boot loader “ — yeah! Thanks!
>
> On Tue, Dec 30, 2025 at 07:20 Nico Huber via coreboot 
> <[email protected]> wrote:
>
>     Hi coreboot folks,
>
>     for those who missed the meeting: it took an early turn when we were
>     told that verified FSP won't be mandatory and won't affect the FSP API
>     mode coreboot uses.
>
>     So the architecture discussion didn't happen. I did some preparation,
>     though, that I didn't want to abandon. So I wrote a blog post about
>     some related thoughts:
>     https://icon.sourcearcade.org/posts/coreboot_not_a_bootloader/
>
>     Wish you all some happy holidays,
>     Nico
>
>     _______________________________________________
>     coreboot mailing list -- [email protected]
>     To unsubscribe send an email to [email protected]
>
>
> _______________________________________________
> coreboot mailing list -- [email protected]
> To unsubscribe send an email to [email protected]

_______________________________________________
coreboot mailing list -- [email protected]
To unsubscribe send an email to [email protected]