secure_boot_gatekeeping_1.c

// Add at line XXX:XXX

// TODO: populate this constant via a linker script
extern uint8_t known_good_hash[64];

// Add at line XXX:XXX
for (unsigned int i=0; i<8; i++) {
  if ((uint64_t)known_good_hash)[i] != (uint64_t)hash)[i]) {
    // Panic
    // TODO: print an error
panic:
    goto panic;
    __builtin_unreachable();
  } }