Would love to see actual security focused hardware/software features, like full OP-TEE, fTPM (or a more ideally a real physical TPM), and similar. For example, so that the OTP isn't the only way to store a disk encryption unlock key.
The existing secure boot mechanisms aren't bad, but allowing for more than one public key hash in OTP would be nice, too.
These kinds of things are expected to be on modern embedded SOCs and SOMs now.
The existing secure boot mechanisms aren't bad, but allowing for more than one public key hash in OTP would be nice, too.
These kinds of things are expected to be on modern embedded SOCs and SOMs now.