Blog category

Device security

How device makers and institutions protect devices below the app: firmware integrity, signing, updates and who owns each duty.

  • Device securityFirmware integrity vs firmware security testing

    Why firmware that verifies correctly can still be vulnerable, and how device makers combine pre-release testing with persistent integrity protection.

  • Device securityOEM signing and update responsibilities

    Who owns each signing key, in what order protection, signing and verification happen, and how device makers plan rotation, expiry and rollback.