Secure Boot Encryption with Linux (Paperback)
Language: English
Published by APress, Berkley, 2026
- Softcover
- New
Seller: CitiRetail, Stevenage, United KingdomCitiRetail
AbeBooks seller since June 29, 2022
Condition: New
£ 29.49
Quantity: 1 available
Add to basketItem description from seller
Paperback. Secure Boot Encryption with Linux serves as a quick guide to building and maintaining a secure, embedded Linux system by establishing a verifiable Chain-of-Trust from the moment power is applied until the first user space application takes control. It meticulously breaks down what the Secure Boot implementation is, and critically, what it is not by providing the technical knowledge necessary to guard against sophisticated bootkits and unauthorized code execution.We begin by dissecting the Linux Cryptographic Subsystem and the core mechanism for secret protection: the Linux Key-Management Facility (Keyring). It provides an in-depth, practical guide to implementing Trusted Keys and Encrypted Keys, detailing how these secrets are secured by tying them to specialized hardware like the Trusted Platform Module (TPM). This unique focus ensures that critical encryption and signing keys are never exposed to user spaces, neutralizing the impact of successful root-level exploits. Next, we explore the implementation of a full Secure Boot Chain-of-Trust. Readers will learn how the Chain-of-Trust works from the initial pre-bootloader (e.g., U-Boot SPL or the Arm Trusted Firmware), through the main bootloader, up to the kernel and the root filesystem. This process guarantees that only code signed by a trusted authority is executed, providing unparalleled protection against firmware injection and persistent bootkits. We finish by looking at a blue print for Secure System Lifecycle Management, integrating the kernel's key-management with Transparent Encryption (dm-crypt) for the root filesystem and detailing the procedures for maintaining security over time. By focusing on root-proof key management and end-to-end integrity enforcement, this pocket guide is essential reading for developers and security architects who need to build resilient Linux products that meet the highest standards of modern cybersecurity.You Will Learn:How to implement and manage cryptographic secrets using the Linux Key-Management Facility (Keyring)Understand how to use the Linux Crypto API for secure hashing, signing, and encryption operationsHow to establish an unbreakable Chain-of-Trust that verifies the integrity and authenticity of every system component, from the initial hardware Root-of-Trust and the pre-bootloader to the final Linux kernel load.How to achieve Transparent Full Disk Encryption by integrating the secure Keyring with key technologies for data confidentiality for OS and Kernel levelsThis Book is for:Experienced embedded Linux developers and security architects This item is printed on demand. Shipping may be from our UK warehouse or from our Australian or US warehouses, depending on stock availability. …
Seller Inventory # 9798868828171
- Title
- Secure Boot Encryption with Linux (Paperback)
- Author
- Rodolfo Giometti
- Publisher
- APress, Berkley
- Publication year
- 2026
- Condition
- new
- Binding
- Paperback
- Language
- English
- ISBN 13
- 9798868828171
Secure Boot Encryption with Linux serves as a quick guide to building and maintaining a secure, embedded Linux system by establishing a verifiable Chain-of-Trust from the moment power is applied until the first user space application takes control. It meticulously breaks down what the Secure Boot implementation is, and critically, what it is not by providing the technical knowledge necessary to guard against sophisticated bootkits and unauthorized code execution.
We begin by dissecting the Linux Cryptographic Subsystem and the core mechanism for secret protection: the Linux Key-Management Facility (Keyring). It provides an in-depth, practical guide to implementing Trusted Keys and Encrypted Keys, detailing how these secrets are secured by tying them to specialized hardware like the Trusted Platform Module (TPM). This unique focus ensures that critical encryption and signing keys are never exposed to user spaces, neutralizing the impact of successful root-level exploits. Next, we explore the implementation of a full Secure Boot Chain-of-Trust. Readers will learn how the Chain-of-Trust works from the initial pre-bootloader (e.g., U-Boot SPL or the Arm Trusted Firmware), through the main bootloader, up to the kernel and the root filesystem. This process guarantees that only code signed by a trusted authority is executed, providing unparalleled protection against firmware injection and persistent bootkits. We finish by looking at a blue print for Secure System Lifecycle Management, integrating the kernel's key-management with Transparent Encryption (dm-crypt) for the root filesystem and detailing the procedures for maintaining security over time.
By focusing on root-proof key management and end-to-end integrity enforcement, this pocket guide is essential reading for developers and security architects who need to build resilient Linux products that meet the highest standards of modern cybersecurity.
You Will Learn:
- How to implement and manage cryptographic secrets using the Linux Key-Management Facility (Keyring)
- Understand how to use the Linux Crypto API for secure hashing, signing, and encryption operations
- How to establish an unbreakable Chain-of-Trust that verifies the integrity and authenticity of every system component, from the initial hardware Root-of-Trust and the pre-bootloader to the final Linux kernel load.
- How to achieve Transparent Full Disk Encryption by integrating the secure Keyring with key technologies for data confidentiality for OS and Kernel levels
This Book is for:
Experienced embedded Linux developers and security architects
"Synopsis" may belong to another edition of this title.
About the Author
Rodolfo Giometti is an Engineer, IT specialist, embedded GNU/Linux expert and Software Libre evangelist. He has over twenty years of experience with GNU/Linux Embedded on x86, ARM, MIPS & PowerPC based platforms, and he is the maintainer of the LinuxPPS projects (the Linux's Pulse Per Second subsystem). Rodolfo still actively contributes to the Linux source code contributing several patches and new device drivers for industrial applications devices.
"About the title" may belong to another edition of this title.
CitiRetail
Stevenage, United Kingdom
AbeBooks seller since June 29, 2022
Shipping rates from United Kingdom to U.S.A.
| Item | 7 to 14 business days | 7 to 60 business days |
|---|---|---|
| First item | £ 37.00 | £ 37.00 |
Payment methods
Store description
Online business
Seller's business information
ABC BOOKS LIMITED
10 John Street
London, United Kingdom WC1N 2EB
Terms of sale
Orders can be returned within 30 days of receipt.
Right of withdrawal
If you are a consumer you can withdraw from the contract in accordance with the following. Consumer means any natural person who is acting for purposes which are outside his trade, business, craft or profession.
Information regarding the right of withdrawal
Statutory right to withdraw
You have the right to withdraw from this contract within 14 days without giving any reason.
The withdrawal period will expire after 14 days from the day on which you acquire, or a third party other than the carrier and indicated by you acquires, physical possession of the last good or the last lot or piece.
To exercise the right of withdrawal, electronically fill in and submit a clear statement on our website, under "My Purchases" in "My Account". We will communicate to you an acknowledgement of receipt of such a withdrawal on a durable medium (e.g. by e-mail) without delay.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning your exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, we will reimburse to you all payments received from you, including the costs of delivery (except for the supplementary costs arising if you chose a type of delivery other than the least expensive type of standard delivery offered by us).
We may make a deduction from the reimbursement for loss in value of any goods supplied, if the loss is the result of unnecessary handling by you.
We will make the reimbursement without undue delay, and not later than 14 days after the day on which we are informed about your decision to withdraw from this contract.
We will make the reimbursement using the same means of payment as you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of such reimbursement.
We may withhold reimbursement until we have received the goods back, or you have supplied evidence of having sent back the goods, whichever is the earliest.
You shall send back the goods or hand them over to CitiRetail, Stevenage, United Kingdom, without undue delay and in any event not later than 14 days from the day on which you communicate your withdrawal from this contract to us. The deadline is met if you send back the goods before the period of 14 days has expired. You will have to bear the direct cost of returning the goods. You are only liable for any diminished value of the goods resulting from the handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Exceptions to the right of withdrawal
The right of withdrawal does not apply to:
- The delivery of newspapers, journals or magazines with the exception of subscription contracts; and
- The supply of digital content which is not supplied on a tangible medium (e.g. on a CD or DVD) if you accepted when you placed your order that we could start to deliver it, and that you could not withdraw once delivery had started.
Shipping terms
Please note that titles are dispatched from our US, Canadian or Australian warehouses. Delivery times specified in shipping terms. Orders ship within 2 business days. Delivery to your door then takes 7-14 days.