Downstream firmware measurement #7

Activity

1. github-project-automation

   added this to OpenPRoT PFRon Jul 9, 2026
2. github-project-automation

   moved this to Todo in OpenPRoT PFRon Jul 9, 2026
3. leongross

   added this to the Boot Orchestration milestone on Jul 9, 2026
4. leongross

   marked this as blocked on Jul 10, 2026

   • dep: Crypto Service #13
5. leongross

   moved this from Todo to Blocked in OpenPRoT PFRon Jul 10, 2026
6. chrysh

   self-assigned this

   on Aug 20, 2026
7. chrysh commented on Oct 28, 2026

   

   chrysh

   on Oct 28, 2026

   Collaborator

   More actions

   Status 2026-10-28: the seam is merged. OpenPRoT#547 added the Measurer trait and the Measurement newtype, OpenPRoT#546 carries the digest on Verdict::Authenticated and reports it as Report::Measured through the board sink, and OpenPRoT#591 runs the path in QEMU: the run passes when the sink was handed exactly one measurement naming the managed device, and every other scenario asserts it was handed none.

   What is left is a Measurer that hashes for real, which needs the crypto read path. No board supplies one today; the digest in the run is a constant. Stays blocked on the crypto service.