A new bootable USB solution.

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

Jo's Embedded Serial File System (for Standard Serial NOR-Flash)

Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI

Disabling kernel lockdown on Ubuntu without physical access

Punchboot

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

OpenEmbedded layer for the use cases on secure boot, integrity and encryption

Emulating Exynos 4210 BootROM in QEMU

MultiZone® Secure IoT Stack for RISC-V

Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

Secure EFI Loader designed to authenticate the non-PE files

Boot multiple systems from a single GRUB2-powered USB drive (just drop ISO or other modules to integrate into menu)

MultiZone® Security SDK for RISC-V

Unsigned code loader for Exynos BootROM

The GRUB2 signing extension are some scripts which help you to verify, sign and unsign your GRUB2 bootloader files using GPG.

systemd-boot integration with secure boot support

Script to sign external Linux kernel modules for UEFI Secure Boot.

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

MultiZone® Security SDK for Linux

USB Format Tool - Make Bootable USB Drive with MBR and 2 Partitions

An open source implementation of an AMD-V Secure Loader.

OpenEmbedded/Poky-compatible reference implementation based on meta-secure-core

yet another pack of scripts for TPM2+Luks

MultiZone® Security SDK for Arm® Cortex®-M

MultiZone® Security SDK for Ada

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

Secureboot Signing Utilities

My Dev Environment for Ubuntu 16.04 with secure boot enabled / Debian 9 (Stretch)