| CPC G06F 8/65 (2013.01) [H04L 9/088 (2013.01); H04L 9/30 (2013.01); H04L 9/3247 (2013.01)] | 20 Claims |

|
1. A non-transitory machine-readable medium having machine-readable instructions comprising a firmware verifier, the machine-readable instructions for the firmware verifier being executable by a processor core to perform operations comprising:
requesting verification of a first signature of a firmware package for a hardware security module (HSM) by the HSM, wherein the HSM uses a public key of a public-private key pair to verify an integrity of the firmware package;
extracting an encrypted augmented firmware image from the firmware package responsive to an indication from the HSM that the first signature is verified;
requesting decryption of the encrypted augmented firmware image by the HSM, wherein the HSM uses a symmetric key to provide a decrypted augmented firmware image in response to the request for decryption; and
transferring the decrypted augmented firmware image to the HSM, wherein the decrypted augmented firmware image includes a second signature that is verifiable with the public key.
|