Here is a short explanation on what BearSSL does.
Import BearSSL ? (Adding verification to loader)
lists.freebsd.org
BSDCan2019: Improving security of the FreeBSD boot process
www.bsdcan.org