> If we are talking about the flight control software, the airplane must have the keys to boot clearly
My laptop doesn't have the keys to decrypt its own hard drive; it boots to initrd and waits for my smart card, which does the decryption. I would imagine the military can do better.
True. On the other hand, the military may need to be able to reboot the thing remotely/automatically, in which case it's possible they don't want to risk having to send the keys first.
If I were to design such a system, booting to full functionality would require human intervention prior to launch, but would allow a reboot to a separate partition with enough functionality to fly the drone back to base. Data, as was pointed before, would be asymmetrically encrypted and would require a separate key that would never reach the drone.
My laptop doesn't have the keys to decrypt its own hard drive; it boots to initrd and waits for my smart card, which does the decryption. I would imagine the military can do better.