[PATCH] Adding password protection to U-boot

Antonio MUñoz chico480 at hotmail.com
Tue Jul 8 12:18:04 CEST 2008


Hello all, I would like to know about this topic, is someone still working on it? 
I know that is old the topic and I hope pardon me if this issue is already done, this mailing list is really amazing (really long :)), 
but I'm really interesting in use GSM for random and also about the access to the SIM card by AT+commmands, maybe I can use some of these features 
for the password protection.

This is my first post so thanks in advance for help me and congratulate everyone for this amazing work.

Cheers, Antonio.

On Wed, Jun 11, 2008 at 7:21 AM, Joerg Reisenweber <joerg at openmoko.org> wrote:
> Am Di  10. Juni 2008 schrieb Francesco Albanese:
>> Hello,
>>
>> this is a patch for u-boot1.3.2rc2 compiled and patched using
>> MMakefile. I've added a new command "lock" for setting a password to
>> lock/unlock the access to the terminal and prevent flashing the device
>> via DFU.
>>
>> Features:
>>
>> - Password stored as SHA256 non-salted hash and written in the env
>> var. partition (a salting method can be added afterwards)
>> - If the password is set, user is prompted for a password after a
>> serial connection is established
>> - If the device is locked down, a DFU flashing attempt will produce an
>> on-screen error on the Neo
>
> Anyway, remember you have TWO bootloaders to patch on FR: NAND *plus* NOR.
> NOR can be flashed by debug board only. So maybe it's a good idea to
> check/evaluate this patch and then use it for factory NOR-boot (password
> unset of course). Otherwise it won't become a story of bold success.
>
> btw: IMEI is a bad candidate for salt. Too predictable, no real random but a
> small interval - not all existing and possible IMEIs are used on Neos. If you
> think of GSM for random, maybe a few data of actual network conditions would
> serve better, like cell-id of current and neighbour cells.
>
> cheers
> jOERG
>

_________________________________________________________________
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar siempre a la última
http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openmoko.org/pipermail/openmoko-devel/attachments/20080708/071dc004/attachment.htm 


More information about the openmoko-devel mailing list