For single-purpose devices, boostrapping security is a problem that has been solved (multiple times even). The methods are mainly described in terms of manufacturers and products. That does match the needs of RIOT style systems, but mainly when incorporated into products, and not with the typical developer workflow, and more importantly, the newcomer workflow, of repeatedly flashing variations of applications and demo programs onto a single board.

This talk presents existing approaches to the problem space, and explores how they can be applied to a cross-application RIOT workflow.