Featured
Pull the flash off our i.MX93 and you get ciphertext: LUKS2, dm-verity, IMA/EVM, and TPM2-sealed keys on Avocado OS
Physical access to the storage should not equal access to the data or the ability to run tampered code. This note wires LUKS2 encrypted /var, dm-verity rootfs integrity, IMA/EVM runtime appraisal, and TPM2-sealed keys into one boot chain on the i.MX93 FRDM.