eBoot Bootloader
eBoot
Secure Bootloader
A cryptographically verified, multi-stage bootloader for EmbeddedOS devices. Hardware root-of-trust, OTA A/B updates with automatic rollback, and sub-200ms boot time.
boot-sequence.log
[ROM] Verifying eBoot Stage 1 signature... OK
[BOOT1] Initialising clocks @ 480 MHz... OK
[BOOT1] DRAM init 64MB SDRAM... OK
[BOOT1] Verifying Stage 2 signature... OK
[BOOT2] OTA staging: no pending update
[BOOT2] Verifying EoS kernel hash... OK
[BOOT2] Handing control to EoS kernel...
[EoS] EmbeddedOS v2.4.1 booting... 187ms
[EoS] All systems nominal. ✓
Boot Sequence
Four verified stages from silicon to running OS
STAGE 01ROM Bootloader
Immutable factory code verifies eBoot signature using hardware root-of-trust keys burned into OTP fuses.
STAGE 02eBoot Stage 1
Minimal loader initialises clocks, DRAM, and the cryptographic engine. Verifies Stage 2 signature.
STAGE 03eBoot Stage 2
Full bootloader environment. Loads EoS kernel image, verifies hash chain, applies OTA staging if pending.
STAGE 04EoS Kernel
Verified kernel image handed control. Device is in a fully attested, trusted state.
eBoot Features
Verified Boot Chain
Every stage cryptographically signed. A tampered image cannot boot — the chain breaks and recovery mode activates.
OTA Update Pipeline
Dual-bank A/B update with automatic rollback. Failed updates revert to the last known-good image automatically.
Hardware Root of Trust
Keys burned into OTP fuses at manufacturing. No software path can override the root verification.
Fast Boot (<200ms)
Optimised stage initialisation gets devices to the EoS kernel in under 200ms on most MCU families.
Recovery Console
UART recovery shell for field repair. Re-flash firmware without physical access to JTAG.
83 Board Support
Same eBoot codebase across all EoS-supported MCU families. One tool, every device.
Secure your device from boot
eBoot is included with every EoS installation. No separate configuration needed.