changed version, replaced unicode arrows (df862d1b) · Commits · STAN4CRA / EN 304 623 Boot Managers

EN-304-623.md

+10 −10

Original line number	Diff line number	Diff line
		<div align="center">
		ETSI EN-304-623 0.0.1 (2025-09)
		ETSI EN-304-623 0.0.2 (2025-09)
		![](media/etsi-coverpage-logo.png)

		CYBER; CRA;<br />
		@@ -302,8 +302,8 @@ Basic boot implements sequential stage execution without cryptographic verificat
		The system begins with power-on, proceeds through hardware initialization, and continues with sequential stage execution where each stage directly loads and executes the next until the boot target is reached.

		```
		Power On → Hardware Init → Boot Manager → Boot Target
		↓ ↓ ↑
		Power On -> Hardware Init -> Boot Manager -> Boot Target
		\| \| \|
		[ROM/Flash] [Configuration] [Hand-off]
		```

		@@ -316,11 +316,11 @@ Components are verified against stored cryptographic signatures or hashes and if
		Systems implementing verified boot require cryptographic verification capabilities and secure storage for verification material.

		```
		Power On → Hardware Init → Boot Loader → Boot Target
		↓ ↓ ↓ ↑
		Power On -> Hardware Init -> Boot Loader -> Boot Target
		\| \| \| \|
		[Trust Root] [Verify] [Verify] [Handoff]
		↓ ↑ ↑
		[Keys/Hashes]──-─┴───────────────┘
		\| \| \|
		[Keys/Hashes]----\|---------------\|
		```

		#### 4.3.1.3 Measured Boot
		@@ -333,11 +333,11 @@ This architecture requires hardware or firmware capable of secure measurement st

		```
		Power On → Hardware Init → Boot Loader → Boot Target
		↓ ↓ ↑
		\| \| \|
		[ROM/Flash] [Configuration] [Handoff]
		↓ ↓ ↓
		\| \| \|
		[TPM: PCR0] [TPM: PCR1] [TPM: PCR2]
		↘ ↓ ↙
		\ \| /
		[Measurement Log]
		```