secure boot

[carloscn]

[carloscn]

Note: For SHA-3 Authentication, always use Keccak SHA-3 to calculate hash on boot header, PPK hash
and boot image. NIST-SHA3 is used for all other partitions which are not loaded by ROM.
The generated signature uses the Keccak-SHA3 or NIST-SHA3 based on following table:

参考：sha3和keccak区别：https://ethereum.stackexchange.com/a/107985

[carloscn]

[carloscn]

https://www.pemicro.com/blog/index.cfm?post_id=237

[carloscn]

https://imxdev.gitlab.io/tutorial/Setting_boot_configuration_on_i.MX/

[carloscn]

https://wiki.phytec.com/pages/releaseview.action?pageId=435126649#i.MX6/i.MX8SecurityManual(L1004e.A2)-NXPi.MX6andi.MX6UL/ULL

[carloscn]

https://www.ezurio.com/resources/software-announcements/high-assurance-boot-hab-dummies