Open Source Summit + Embedded Linux Conference North America 2026

Secure Boot is often described using cryptography-heavy terminology, vendor-specific flows, and complex diagrams that make it intimidating for embedded developers.
This talk explains Secure Boot for embedded Linux systems from first principles, using simple language and clear mental models.

We start by answering why Secure Boot exists, then walk step by step through the boot process. Concepts like Root of Trust and signature verification are explained without assuming prior security or cryptography background.

The session focuses on what actually happens at boot time, not on vendor marketing or abstract theory. Real-world examples from common embedded Linux systems are used to illustrate how Secure Boot is implemented and where it can fail if misunderstood.

By the end of the talk, attendees will be able to explain Secure Boot in their own words, understand its guarantees and limitations, and reason about Secure Boot designs in real embedded products.