A new bootable USB solution.

The Reliable USB Formatting Utility

💻 🔒 🔑 Secure Boot key manager

Secure Boot & Measured Boot for NixOS [maintainers=@blitz @RaitoBezarius @nikstur]

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables as well as scripts for other Secure Boot related items.

Mosby – More Secure Secure Boot

Jo's Embedded Serial File System (for Standard Serial NOR-Flash)

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

Linux UEFI library written in pure Go.

attestation.app remote attestation server. Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

OpenEmbedded/Yocto BSP layer for STM32MP15x based MPUs

Unsigned code loader for Exynos BootROM

A comprehensive guide to installing Arch Linux with all of the modern features.

Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI

The sequel to Voyager

Unsigned code loader for Amlogic BootROM

Punchboot