Post-quantum cryptography for secure boot

Abstract

In general, a computing device comprising a secure memory, a storage device, and a processor may be configured to implement the techniques. The secure memory may store a post-quantum cryptographic reference signature (PQCRS). The storage device may store bootloader stages, a list of classical cryptographic reference signatures (CCRS), and a PQC public key (PQCPK). The processor may, prior to executing a first bootloader stage, obtain the list of CCRS, the PQCRS, and the PQCPK. The processor may also apply a PQC algorithm with respect to the PQCRK and the list of CCRS to obtain a PQC verification signature (PQCVS), and responsive to the PQCVS matching the PQCRS, compare a first CCRS in the digitally signed list of CCRS to a first CC verification signature (CCVS) obtained based on the first bootloader stage. The processor may also, responsive to the first CCVS matching the first CCRS, execute the first bootloader stage.