OK, that's how you get a boot ROM.

好的，这就是您获得引导 ROM 的方式。

And there are basically no strings in that boot ROM.

而且那个boot ROM里面基本没有字符串。

So we got the boot ROM.

所以我们得到了引导ROM。

We can't debug the boot ROM using JTAG and just tell it to skip that instruction or whatever.

我们无法使用 JTAG 调试引导 ROM，只能告诉它跳过该指令或其他任何指令。

Then the boot ROM on the next boot sees that this bit is set.

然后在下次引导时引导 ROM 会看到该位已设置。

So the boot ROM lock, how does it work? Well, yeah, let's look at the technical reference manual.

那么boot ROM锁，是如何工作的呢？嗯，是的，让我们看看技术参考手册。

So you have to trust that boot ROM.

所以你必须相信那个引导 ROM。

Story about this is, after you get the boot ROM, you, of course, try to analyze this and find the bug.

关于这个的故事是，在你得到引导 ROM 之后，你当然会尝试分析它并找到错误。

The boot ROM has multiple paths.

引导 ROM 有多个路径。

If you can't trust that boot ROM anymore, you can do whatever you want on that platform.

如果你不能再信任那个引导 ROM，你可以在那个平台上做任何你想做的事。

The boot ROM did its thing.

引导 ROM 做了它的事情。

So right before the boot ROM must disable the boot ROM.

所以在boot ROM之前一定要禁用boot ROM。

Also, the BCT tells the boot ROM where to find the boot loader, what boot loader to load, and the hash of the boot loader.

此外，BCT 还会告诉引导 ROM 在哪里可以找到引导加载程序、要加载的引导加载程序以及引导加载程序的哈希值。

And it says this specifies the offset from the start of the boot ROM to the protected region.

它说这指定了从引导 ROM 开始到受保护区域的偏移量。

So if you try to execute this code here after the boot ROM is locked, it does whatever, but not going to execute the ROM again.

因此，如果您在引导 ROM 被锁定后尝试在此处执行此代码，它会执行任何操作，但不会再次执行 ROM。

So I essentially measured how long it takes for the boot ROM to do its thing.

所以我基本上测量了引导 ROM 完成它的工作需要多长时间。

What this register does is even if the boot ROM is locked, you can configure how much can be read of the boot ROM.

这个寄存器的作用是即使boot ROM被锁定，你也可以配置boot ROM可以读多少。

All the time, boot ROM locked, boot ROM locked, boot ROM locked, boot ROM locked.

一直以来，引导 ROM 锁定，引导 ROM 锁定，引导 ROM 锁定，引导 ROM 锁定。

And also here is a block that's called IROM, and IROM is the boot ROM.

这里还有一个叫做 IROM 的块，IROM 是引导 ROM。

So what happens is when the system turns on, the first thing, as I said, that's executed is the boot ROM.

因此，当系统启动时，首先执行的是引导 ROM，正如我所说的。