🔐

eBoot

Secure Bootloader

Secure bootloader establishing hardware root of trust for all EmbeddedOS devices. Verified boot chains, firmware updates, and board-specific port layers.

Platform FoundationC/AssemblyActive Development

View on GitHub

Key Features

Secure Boot Chain — RSA-2048/Ed25519 verification

Firmware Update (FOTA) — A/B partition scheme

Hardware Root of Trust — HSM, TPM 2.0, TrustZone

Minimal Footprint — Stage 1 fits in 8 KB

Anti-Rollback Protection — OTP fuse counters

Recovery Mode — UART/USB failsafe

AES-256-GCM firmware encryption

Architecture

Power On / Reset
├── Stage 0: ROM Bootloader (SoC-specific)
├── Stage 1: eBoot Primary (8 KB) — Ed25519 verify
├── Stage 2: eBoot Secondary (56 KB) — Full init, update
└── eos Kernel Boot — Jump to entry point

Code Example

#include <eboot/config.h>

#define EBOOT_BOARD_NAME        "eHealth365_SmartRing"
#define EBOOT_FLASH_BASE        0x08000000
#define EBOOT_FLASH_SIZE        (2 * 1024 * 1024)
#define EBOOT_PARTITION_A       0x08010000
#define EBOOT_PARTITION_B       0x08110000
#define EBOOT_SIGN_ALGO         EBOOT_SIGN_ED25519
#define EBOOT_ENCRYPT_ALGO      EBOOT_ENCRYPT_AES256_GCM
#define EBOOT_ANTI_ROLLBACK     1

API Highlights

Function	Description
`eboot_verify_image()`	Verify firmware image signature
`eboot_install_update()`	Install firmware update to inactive partition
`eboot_rollback()`	Roll back to previous firmware version
`eboot_enter_recovery()`	Enter UART/USB recovery mode

← Back to All Products