I'd like to build a linux kernel that's specific to a given Raspberry, ie. one that won't boot on any other Raspberries. My idea is to bind the kernel to the cpu's serial number bit I haven't found any infos on this topic.
Yes, I know
a) I'd have to build/compile a custom kernel for every device;
b) that exchanging the kernel for a clean one would forgo this piece of "security", but there are keys stored in the kernel which are needed for userland later on which would be unavailable then.
Any "later" stages (ie. checks for a specific serial number once the kernel is booted by some userland tool) do work theoretically but are out of the question here as they could very easily (as in: easier then reverse engineering the complex kernel) be reverse engineered.
Any ideas and pointers are, as always, highly appreciated.