DICE-like measured boot guarantees software integrity bound to a
specific hardware even on low-powered devices with no Trusted
Execution Environment (TEE). An inherent problem in DICE-like measured
boot is that the first mutable code cannot be updated without losing
generated cryptographic keys.

In this talk I both introduce how we implemented DICE-like measured
boot in an open source project and how we solved updating device
applications without losing keys.