Working on a boot process where the application image has to be verified before loading it into DRAM.
We found 2 strategies;
RSA-1024, where the private key is secure in premises and the only public key is distributed with out boards. (Is it better if up-gradable to RSA-2048?)
AES-256 with CMAC, same key available both board and premise.
As they are symmetric and asymmetric, it is difficult to compare them directly. Like to understand, which is best suited for binary signature verification during boot process?