secure-boot

A new bootable USB solution.

Hardware-based attestation / intrusion detection app for Android devices. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

Jo's Embedded Serial File System (for Standard Serial NOR-Flash)

Disabling kernel lockdown on Ubuntu without physical access

Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI

Windows 11 compability check with user friendly output

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

Linux UEFI library written in pure Go.

OpenEmbedded layer for the use cases on secure boot, integrity and encryption

Punchboot

Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

Emulating Exynos 4210 BootROM in QEMU

MultiZone® Security TEE for RISC-V

Secure EFI Loader designed to authenticate the non-PE files

Unsigned code loader for Exynos BootROM

Boot multiple systems from a single GRUB2-powered USB drive (just drop ISO or other modules to integrate into menu)

systemd-boot integration with secure boot support

The GRUB2 signing extension are some scripts which help you to verify, sign and unsign your GRUB2 bootloader files using GPG.

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

USB Format Tool - Make Bootable USB Drive with MBR and 2 Partitions

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

Script to sign external Linux kernel modules for UEFI Secure Boot.

An open source implementation of an AMD-V Secure Loader.

MultiZone® Security Enclave for Linux

Unsigned code loader for Amlogic BootROM

yet another pack of scripts for TPM2+Luks

MultiZone® Security SDK for Arm® Cortex®-M

OpenEmbedded/Poky-compatible reference implementation based on meta-secure-core

MultiZone® Security SDK for Ada