Semiconductor device, boot method, and boot program

A boot method to be executed by a semiconductor device that boots a program, the boot method comprising:

• acquiring a public key, a signature generated with a secret key corresponding to the public key, and a program associated with the signature by the semiconductor device;
• performing signature verification by using the acquired public key and the acquired signature, before the acquired program is booted;
• calculating a determination value for determining that the program is legitimately manufactured and is not tampered by using information identifying an own device thereof, and storing the determination value, when the signature is verified to be appropriate in the signature verification;
• and
• recalculating the determination value by using the information identifying the own device, performing a determination process that compares the recalculated determination value and the stored determination value with each other to determine that the program is legitimately manufactured and is not tampered, and executing boot based on a result of the determination, when the program is booted,
• wherein a common key is also acquired,
• wherein the program and the signature are encrypted with the common key,
• wherein the program and the signature are decrypted with the common key, and the signature verification is performed using the public key and the decrypted signature,
• wherein a key is generated using the information identifying the own device and the calculated determination value and the program are re-encrypted with the key, and
• wherein the program and the stored determination value are decrypted with the key, and the determination process is performed.

A non-transitory memory storing a boot program, when executed by a semiconductor device, causes the semiconductor device to acquire a public key, a signature generated with a secret key corresponding to the public key, and a boot target program associated with the signature, and further causes the semiconductor device to:

• perform signature verification by using the public key and the signature, before the boot target program is booted;
• calculate a determination value for determining that the boot target program is legitimately manufactured and is not tampered by using information identifying an own device thereof, and store the determination value, when the signature is verified to be appropriate in the signature verification;
• and
• recalculate the determination value by using the information identifying the own device, perform a determination process that compares the recalculated determination value and the stored determination value with each other to determine that the boot target program is legitimately manufactured and is not tampered, and execute boot based on a result of the determination, when the boot target program is booted,
• wherein a common key is also acquired,
• wherein the program and the signature are encrypted with the common key,
• wherein the program and the signature are decrypted with the common key, and the signature verification is performed using the public key and the decrypted signature,
• wherein a key is generated using the information identifying the own device and the calculated determination value and the program are re-encrypted with the key, and
• wherein the program and the stored determination value are decrypted with the key, and the determination process is performed.