An agricultural engineering team is deploying autonomous field-monitoring drones that operate in remote, unmonitored locations. To protect the drone flight control systems against unauthorized firmware modifications and ensure hardware-isolated cryptographic key security, which of the following hardware security controls should the engineers implement? (Select TWO.)
- Secure Boot integrated with a hardware Root of Trust (RoT) to cryptographically verify bootloader signatures prior to execution.Answer
- A hardware-based Trusted Platform Module (TPM) to securely store encryption keys and perform hardware-isolated cryptographic operations.Answer
- CAsymmetric RSA-4096 key pairs to encrypt high-throughput flight telemetry logs directly to onboard flash media.
- DHost-based software firewall rules to block unauthorized physical firmware flashing over serial JTAG debug interface pins.
Answer
The engineers should implement Secure Boot integrated with a hardware Root of Trust (RoT) and incorporate a Trusted Platform Module (TPM).
Implementing Secure Boot backed by a hardware Root of Trust guarantees bootloader and firmware integrity by verifying digital signatures before code execution. Additionally, using a Trusted Platform Module (TPM) isolates key generation, measurement, and key storage within tamper-resistant hardware cryptoprocessors.
Step-by-Step Solution
Key Concept
Hardware Root of Trust and TPM Cryptoprocessor Integration