[CameronNemo]

Is there a way to implement secure boot for embedded devices in another way? I've been racking my brain and the only way I can think of is to have a flash of an image verification key also result in an on device regeneration of a private key. Then require the device to sign something with that private key to verify the boot. All of that would require a complicated boot process and probably an embedded controller to facilitate.

[p_l]

Raptor Engineering's FlexVer is specifically working to provide trusted root without burning-in keys.

The problem is that it essentially requires an extra FPGA and few other components that provide the necessary secure key storage and attestation.