Secure boot download computations based on host transport conditions

A system for secure download of a boot patch that includes a plurality of packets from a host device to a target device, said system comprising:

• target download circuitry to determine whether each packet included in the plurality of packets received from the host is a valid packet;
• secure boot engine circuitry communicably coupled to said target download circuitry, said secure boot engine circuitry to, as each valid packet included in the plurality of packets is received at the target device:
• determine a packet security value associated with the valid packet by performing a first type of security computation on the valid packet;
• and
• determine a first patch security value associated with the boot patch based on each determined packet security value;
• wherein the secure boot engine circuitry is further to:
• determine a second patch security value associated with the boot patch by performing a second type of security computation based on one or more of received valid packets;
• and
• upon receipt of all packets included in the plurality of packets at the target device, determine a security status of the boot patch based on a comparison of the first patch security value and the second patch security value.

A method for secure download of a boot patch that includes a plurality of packets from a host device to a target device, said method comprising:

• determining, with target download circuitry, whether each packet included in the plurality of packets received from the host is a valid packet;
• determining, with secure boot engine circuitry communicably coupled to said target download circuitry and as each valid packet included in the plurality of packets is received at the target device:
• a packet security value associated with the valid packet by performing a first type of security computation on the valid packet;
• and
• a first patch security value associated with the boot patch based on each determined packet security value;
• and
• with said secure boot engine circuitry:
• determining a second patch security value associated with the boot patch by performing a second type of security computation based on one or more of received valid packets;
• and
• upon receipt of all packets included in the plurality of packets at the target device, determining a security status of the boot patch based on a comparison of the first patch security value and the second patch security value.

A non-transitory computer-readable storage medium having instructions stored thereon which when executed by a processor result in the following operations for secure download of a boot patch that includes a plurality of packets from a host device to a target device, said operations comprising:

• determining, with target download circuitry, whether each packet included in the plurality of packets received from the host is a valid packet;
• determining, with secure boot engine circuitry communicably coupled to said target download circuitry and as each valid packet included in the plurality of packets is received at the target device:
• a packet security value associated with the valid packet by performing a first type of security computation on the valid packet;
• and
• a first patch security value associated with the boot patch based on each determined packet security value;
• and
• with said secure boot engine circuitry:
• determining a second patch security value associated with the boot patch by performing a second type of security computation based on one or more of received valid packets;
• and
• upon receipt of all packets included in the plurality of packets at the target device, determining a security status of the boot patch based on a comparison of the first patch security value and the second patch security value.