Description
The Secure Boot Team is interested in making a secure booting system that uses multiple factors of authentication and physical tamper resistance/detection before initiating the boot process on a computer. We propose this solution as current implementations of secure boot on machines only protect against software tampering. Overall, our goal is to design and implement the software and hardware components to facilitate this process through a modified bootloader and multiple factors of authentication. We intend to use and modify the open source coreboot/SeaBIOS stack to interface with a SoloKey and NFC card reader to ensure multiple forms of authentication. As an additional security measure, tamperproofing will be implemented to protect hardware from physical manipulations. To do such, an electrical circuit will be designed with specific electrical specifications that create a highly sensitive response to physical manipulations, and measuring accurate electrical specifications will be a requirement for the secure boot process to ensure the lack of physical manipulation.