https://sec.schmolka.org/tags/verification/Recent content in Verification on sec.schmolka.orgHugoen-GBThu, 15 Oct 2026 00:00:00 +0000https://sec.schmolka.org/posts/2026-10-15-assumptions-on-the-chain-of-trust/Thu, 15 Oct 2026 00:00:00 +0000https://sec.schmolka.org/posts/2026-10-15-assumptions-on-the-chain-of-trust/<p>For a security architecture to verify anything, it needs to parse data. After parsing, the (hopefully) cryptographically sound algorithms can do their job and prove that e.g. the kernel&rsquo;s signature is valid and that it can be loaded. But who verifies the parsing?</p> <h2 id="what-is-the-chain-of-trust-and-why-does-it-work">What is the Chain of Trust and why does it work?</h2> <p>The Chain of Trust is a concept in which each part of a system verifies the authenticity of another element, with trust flowing from a root node. In embedded systems, this is usually something you can physically control, but can also be something you simply choose to trust (such as a root CA for certificates).</p>