Storage device and method of providing firmware image

A booting method of a storage device, comprising:

• loading a firmware set stored in a non-volatile memory device into a buffer memory;
• generating a customer secret key by decrypting an encrypted customer secret key stored in a one-time programmable (OTP) memory using a physically unclonable function (PUF) chip;
• generating a customer symmetric key by decrypting an encrypted customer symmetric key included in the firmware set using the customer secret key;
• generating an encrypted firmware image by decrypting a double-encrypted firmware image included in the firmware set using the customer symmetric key;
• generating a vendor secret key by decrypting an encrypted vendor secret key stored in the OTP memory using the PUF chip;
• generating a vendor symmetric key by decrypting an encrypted vendor symmetric key included in the firmware set using the vendor secret key;
• generating a firmware image by decrypting the encrypted firmware image using the vendor symmetric key;
• and
• executing firmware using the generated firmware image.

A method of providing a firmware image, comprising:

• generating a vendor symmetric key, and a first key pair including a vendor public key and a vendor secret key;
• providing a first key injection command including the vendor secret key and an authenticator to a storage device, controlling the storage device to verify the first key injection command and encrypt and store the vendor secret key with a unique security key;
• generating an encrypted firmware image by encrypting the firmware image using the vendor symmetric key, and generating an encrypted vendor symmetric key by encrypting the vendor symmetric key using the vendor public key;
• generating a customer symmetric key, and a second key pair including a customer public key and a customer secret key;
• providing a second key injection command including the customer secret key and the authenticator to the storage device, controlling the storage device to verify the second key injection command and encrypt and store the customer secret key with the unique security key;
• generating a double-encrypted firmware image by encrypting the encrypted firmware image using the customer symmetric key, and generating an encrypted customer symmetric key by encrypting the customer symmetric key using the customer public key;
• and
• providing a firmware set including the double-encrypted firmware image, the encrypted vendor symmetric key and the encrypted customer symmetric key, to the storage device.