secure boot system

==================================================================================================
=== BOOT ORDER ===================================================================================
==================================================================================================

-----------------------------------------
|                 boot0                 |
|        load and verify metaldr        |----------|
-----------------------------------------          |
                    |                              |
                    |                        -------------
                    |                        | key store |
                    |                        -------------
                    |                              |
-----------------------------------------          |
|                metaldr                |----------|
|  load and verify all system modules   |
-----------------------------------------
                    |
                    |        -----------------------------------------
                    |        |                debugger               |
                    |------->|            monitor metaldr            |
                    |        -----------------------------------------
                    |
                    |        -----------------------------------------
                    |        |              hypervisor               |
                    |------->| execute and verify all module actions |
                    |        -----------------------------------------
                    |

==================================================================================================
=== DETAILS ======================================================================================
==================================================================================================

boot0
	load metaldr into memory
	verify hash of metaldr
	pass control to metaldr

metaldr
	load bootfs image into memory
	verify hash of bootfs image decryption key
	decrypt bootfs image
	load all modules the bootfs image contains