System and method for code authentication

Abstract

The present invention provides for authentication of code, such as boot code. A memory addressing engine is employable to select a portion of a memory, as a function of a step value, as a first input hash value. The step value allows for the non-commutative cumulative hashing of a plurality of memory portions with a second input hash value, such as a previous hash value that has been rotated left. An authenticator circuit is employable to perform a hash upon the portion of memory and the second input hash value. A comparison circuit is then employable to compare an output of the authenticator circuit to an expected value.

Description

technical field [0001] The present invention relates generally to boot control mechanisms, and more particularly, the present invention relates to boot control mechanisms employing hardware signatures. Background technique [0002] Security in computer systems is a concern. Unauthorized reading of code or data or inadvertent or malicious alteration of code or data in computer systems can occur. [0003] A common solution for security of the boot code process is to employ a software cryptographic lock, also known as a software cryptographic signature. Generally, when a suspicious boot code is encountered, the software password lock or software password signature analyzes a piece of boot code by executing a function, such as a hash function. If the value calculated by the hash function is correct (ie, the software "signature" is correct), the suspicious code is considered safe and allowed to access the system. [0004] However, there are a number of problems associated with...

AI Technical Summary

Problems solved by technology

As a result, hashing systems generally provide a slower verification process

Images