3 रिपॉजिटरी
Enrollment and management of public keys for hardware-verified boot processes.
Distinct from Container Image Signing: Candidates focus on delivery or container signing, not the enrollment of keys in the firmware for Secure Boot.
Explore 3 awesome GitHub repositories matching security & cryptography · Secure Boot Key Management. Refine with filters or upvote what's useful.
Bazzite is an immutable, atomic-image-based operating system designed for gaming performance and handheld hardware. It utilizes a read-only root filesystem and versioned images to provide atomic updates and instant system rollbacks, ensuring a stable core environment. The system is distinguished by its deep optimization for portable gaming devices, featuring dedicated handheld hardware management for CPU undervolting, fan control, and display refresh rate overclocking. It includes a specialized gaming mode that boots directly into a console-like interface with integrated input mapping and a t
Registers custom public keys to enable Secure Boot validation for custom images.
This project provides a customized Linux kernel and driver suite designed to enable hardware compatibility for Surface devices. It focuses on building and patching the Linux kernel to provide driver support for proprietary hardware components that are missing from the upstream source. The system includes a secure boot kernel signing mechanism and a process for enrolling custom keys into the system firmware. This allows the execution of patched kernels while maintaining system security protections. The project covers peripheral driver support for touchscreens, styluses, and keyboards, as well
Enrolls custom signing keys into the system firmware to allow patched kernels to boot securely.
Brunch is a boot framework and hardware adaptation layer designed to run ChromeOS on non-native x86_64 PCs. It utilizes a custom EFI bootloader and kernel injection to enable the operating system to function on Intel and AMD processors not originally supported by official images. The framework distinguishes itself by transforming official recovery images into generic bootable versions through the use of custom kernels and EFI partition bootstrapping. It allows for the importation of security keys into system firmware to support secure boot and provides tools to toggle hardware patches and fea
Enables the enrollment of security keys into system firmware to allow the boot framework to run with Secure Boot active.