Best way to validate a WinCE OS image (.bin) file?

Question

We have a Windows CE 6.0 based product that allows for firmware upgrades through a web interface. I want to perform a sanity check on the new firmware image to be sure that it is valid. How should I perform the validation?

I see in the BIOSLOADER code, there is support code for decoding a BIN file. I suppose I could massage that to perform the validation. Is there a better way?

Thanks!

Answer 1

The safest way is to wrap the firmware blob in a container format which supports some form of public key signatures.