Storage device

A storage device comprising:

• a boot Read Only Memory (ROM) configured to store a plurality of public keys and a boot ROM image;
• an One Time Programmable (OTP) memory configured to identify a first public key among the plurality of public keys;
• a first memory including a first area configured to store the plurality of public keys and a flash boot image different from the boot ROM image, and a second area configured to store a first boot signature corresponding to the flash boot image, the second area being different from the first area;
• a second memory including a user data area, and a firmware image area configured to store a first firmware image including a first firmware signature;
• and
• a memory controller configured to:
• receive a second firmware image including a second firmware signature different from the first firmware signature, and
• write the second firmware image in the firmware image area based on the second firmware image being received,
• wherein the first area of the first memory is only readable by the memory controller, and the second area of the first memory is readable and writable by the memory controller.

A storage device comprising:

• a boot Read Only Memory (ROM) which stores a plurality of public keys and a boot ROM image;
• an One-Time Programmable Memory (OTP) memory configured to identify a first public key among the plurality of public keys;
• a first memory including a first area configured to store the plurality of public keys and a flash boot image different from the boot ROM image, and a second area configured to store a first boot signature corresponding to the flash boot image and different from the first area;
• a second memory including a user data area, and a firmware image area configured to store a first firmware image including a first firmware signature generated based on a first private key corresponding to the first public key;
• and
• a memory controller configured to:
• receive a second firmware image including a second firmware signature different from the first firmware signature, and a second boot signature different from the first boot signature,
• write the second boot signature in the second area of the first memory based on the second firmware image being received, and
• write data in the OTP memory so that the OTP memory identifies a second public key different from the first public key among the plurality of public keys and delete the first boot signature stored in the second area of the first memory,
• wherein the second firmware signature is generated based on a second private key corresponding to the second public key and the second firmware image.