Towards a verified first-stage bootloader in Coq
Name
1193030814-MIT.pdf
Size
354.56 KB
Format
Adobe PDF
Checksum (MD5)
4136fa2a3f906b6972c8f0531a3b927d
Author(s)
Straznickas, Zygimantas.
Advisor(s)
Adam Chlipala.
Date Issued
2020
Publisher
Massachusetts Institute of Technology
Abstract
A cryptographic secure boot and attestation system usually depends on a measurement root -- a first-stage bootloader written to ROM that loads the boot payload into the machine's memory, cryptographically signs it and ensures that the boot payload begins execution from a clean-slate environment. We implement a first-stage bootloader heavily inspired by the Sanctum project [5], describe its specification in Coq relative to low-level RISC-V semantics, state the correctness of the implementation as a theorem in Coq and prove a few major lemmas necessary for establishing correctness.
Description
Thesis: M. Eng., Massachusetts Institute of Technology, Department of Electrical Engineering and Computer Science, May, 2020
Cataloged from the official PDF of thesis.
Includes bibliographical references (pages 43-45).
Subjects
Electrical Engineering and Computer Science.
MIT Department
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
MIT theses may be protected by copyright. Please reuse MIT thesis content according to the MIT Libraries Permissions Policy, which is available through the URL provided.
Persistent DSpace Link
