it seems state of the art that the autmotive electronical Control units (ECUs) contain security features as Secure Flashing and Secure Boot. For secure flashing, each new software to be programmed is verified by performing signature verification before it is installed.
Why does one then need secure boot, where checksums are being calculated to verify that the application has not been altered? To alter the software, one would have to reflash it, but for that, secure flashing feature is implemented. What am I misunderstanding here?