--- title: Garmo-Secure-Boot | Garmo Labs url: https://garmolabs.com/ip/garmo-secure-boot description: Security — post-quantum-ready root of trust and secure boot --- [Ip](https://garmolabs.com/marketplace) › IP-2084 Security & trust # Garmo-Secure-Boot Security — post-quantum-ready root of trust and secure boot Evaluation package [Request evaluation](https://garmolabs.com/contact?products=ip-ip-2084) Gar Security & trust THE TECHNICAL ROLE ## A clear integration boundary. Garmo-Secure-Boot integration role: Security — post-quantum-ready root of trust and secure boot. Documented composition: SHA-256/384/512 and SHA-3 streaming hash; ECDSA P-384/Ed25519 adapter plus ML-DSA accelerator boundary for hybrid signatures; Measured boot, DICE-style compound identity and attestation log. 01 SHA-256/384/512 and SHA-3 streaming hash 02 ECDSA P-384/Ed25519 adapter plus ML-DSA accelerator boundary for hybrid signatures 03 Measured boot, DICE-style compound identity and attestation log TECHNICAL OVERVIEW ## The details matter. [Download the product brief](https://garmolabs.com/static/briefs/ip-ip-2084.pdf) Canonical identity IP-2084 Responsibility Security — post-quantum-ready root of trust and secure boot Documented interface architecture ROM/OTP/eFuse, flash/NVMe stream, crypto accelerator ports, lifecycle/debug, DICE/attestation output Documented building blocks SHA-256/384/512 and SHA-3 streaming hash; ECDSA P-384/Ed25519 adapter plus ML-DSA accelerator boundary for hybrid signatures; Measured boot, DICE-style compound identity and attestation log Delivery boundary Evaluation / IP scope Evidence scope Evaluation package Architecture targets · not measurements <10 ms verification target for typical 4 MiB first-stage image with streaming hash; measured boot and recovery. ### Before integration. Garmo-Secure-Boot integration role: Security — post-quantum-ready root of trust and secure boot. Documented composition: SHA-256/384/512 and SHA-3 streaming hash; ECDSA P-384/Ed25519 adapter plus ML-DSA accelerator boundary for hybrid signatures; Measured boot, DICE-style compound identity and attestation log. - Interface version and parameter set - Clock/reset domains and integration constraints - Companion memory, PHY and software requirements - Verification collateral and acceptance criteria The selected release must confirm: - Node/library binding - Clock/reset limits - Physical and protocol dependencies - Artifact hashes - Acceptance criteria Unpublished values are not inferred from family names or architecture targets. [Discuss the integration](https://garmolabs.com/contact?products=ip-ip-2084) Evaluation package ## Know the release. Know what it establishes. Canonical technology and its architecture/integration role are recorded. The offered delivery is confirmed against the exact release before licensing. This is a controlled-portfolio summary, not a fresh execution of the chip qualification flow. [Explore the evidence center](https://garmolabs.com/evidence) [Qualification record](https://garmolabs.com/qualification/ip-ip-2084) ### Release-specific qualification No node-port, silicon-performance, standards certification or analog qualification is inherited from a related product. Canonical record: P0 / REPRESENTATIVE ARCHITECTURE RTL — concrete integration specification and synthesizable RTL shell/representative datapath only; all frequency, throughput, power, area, jitter and standards-superiority figures remain architecture targets until the required evidence hierarchy closes. A PATH THAT FITS THE PROJECT ## Build with Garmo-Secure-Boot. Technical scope, rights, support and release configuration are agreed before delivery. evaluation ### Evaluate an individual IP configuration Inspect the named release and establish technical fit. [Discuss this scope](https://garmolabs.com/contact?products=ip-ip-2084&scope=evaluation) production ### Named-design production license Agree deployment or design rights, deliverables and support. [Discuss this scope](https://garmolabs.com/contact?products=ip-ip-2084&scope=production) custom ### Node binding or derivative integration Define the customer-specific work and acceptance criteria. [Discuss this scope](https://garmolabs.com/contact?products=ip-ip-2084&scope=custom) ## Keep exploring. Security & trust [## KENBE Authority Guard](https://garmolabs.com/ip/kenbe-authority-guard) Checks memory request domain/authority permissions. RTL + models IP-4017 · Source / reference evidence Security & trust [## KENBE Certified-Crypto Boundary](https://garmolabs.com/ip/kenbe-certified-crypto-boundary) Boundary/control contract to qualified encryption/authentication macros without toy cryptography. RTL + models IP-4018 · Source / reference evidence Security & trust [## KENBE Epoch / Version Guard](https://garmolabs.com/ip/kenbe-epoch-version-guard) Rejects stale epoch/version operations under the KENBE transaction contract. RTL + models IP-4019 · Source / reference evidence ## Your next big idea. Let’s build it together. Start with a chip, a software release or a single IP block. [Talk to Garmo](https://garmolabs.com/contact) [Start exploring](https://garmolabs.com/developers) CANONICAL EVIDENCE RECORD · IP-2084 ### Source documented A concrete source or implementation record exists; the selected evidence does not establish complete qualification. **Record integrity and qualification boundary**Retained exact-release source reference; no new table locator was inferred. Evidence ranking for evaluation prioritization; not a probability or certification. [How evidence priority is determined ](https://garmolabs.com/marketplace/evidence)