⚠️ VeridianOS Kernel Documentation - This is low-level kernel code. All functions are unsafe unless explicitly marked otherwise. no_std

verify

veridian_kernel::security::boot

Function verify 

Source 
pub fn verify() -> Result<(), KernelError>
Expand description

Verify secure boot chain.

This is the main entry point called during kernel initialization. It performs the following steps:

  1. Check if secure boot is enabled
  2. Hash the kernel image
  3. Record the measurement in the boot log
  4. Extend TPM PCR 0 with the kernel hash
  5. Verify the kernel signature (if configured)
  6. Fall back to hash comparison (if no signature)
  7. Return overall verification status