SPRUJB6B November 2024 – May 2025 AM2612
The Image Integrity Object Identifier has the following format: -
imageIntegrity ::= SEQUENCE {
sha_type: OID, -- Identifies the SHA type
hash: OCTET STRING -- The SHA of the boot image
}DESCRIPTION
If the X.509 certificate provides the image integrity boot extension the Boot-ROM will perform the SHA-512 on the entire image and will verify the computed hash with the hash provided in the boot extension. In the case of a mismatch the boot will fail.SHA Type: The Boot-ROM only supports SHA-512.
| Value | Description |
|---|---|
| 2.16.840.1.101.3.4.2.3 | SHA-512 Object Identifier |
Please refer to the Section 2.4 of the RFC-5754 for the SHA-512 Object Identifier.
Hash: This is SHA-512 hash which is calculated over the image (R5 SBL/HSM Runtime)