... your bootloader for a signed hash of itself and verify that the signature of the hash ...
... comes from a trusted party, someone you trust. Once you trust the bootloader to faithfully ...