From 03be1b8687afbeff622d392843567141b1028476 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 6 Aug 2024 13:12:28 -0400 Subject: firmware anti-rollback is actively used since Pixel 6 --- static/install/cli.html | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) (limited to 'static/install/cli.html') diff --git a/static/install/cli.html b/static/install/cli.html index e8e46834..1d6a8d2a 100644 --- a/static/install/cli.html +++ b/static/install/cli.html @@ -556,9 +556,9 @@ curl -O https://releases.grapheneos.org/DEVICE_NAME-install-VERS OS, it can be detected with these features.

Verified boot verifies the entirety of the firmware and OS images on every - boot. The public key for the firmware images is burned into fuses in the SoC - at the factory. Firmware security updates can also update the rollback index - burned into fuses to provide rollback protection.

+ boot. The public key for the firmware images is burned into fuses in the SoC at + the factory. Firmware security updates also update the rollback index burned + into fuses to provide rollback protection.

The final firmware boot stage before the OS is responsible for verifying it. For the stock OS, it uses a hard-wired public key. Installing GrapheneOS -- cgit v1.3.1