Top 12 secure-boot open source projects

A new bootable USB solution.

Calculate future (next boot) TPM PCRs after a kernel upgrade

Secure EFI Loader designed to authenticate the non-PE files

Emulating Exynos 4210 BootROM in QEMU

Server code for use with the Auditor app: https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

Linux UEFI library written in pure Go.

MultiZone® Security Enclave for Linux

Unsigned code loader for Exynos BootROM

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

A small subset of the submitted sample data from https://github.com/GrapheneOS/Auditor. It has a sample attestation certificate chain per device model (ro.product.model) along with a subset of the system properties from the sample as supplementary information.

Unmaintained systemd-boot integration with secure boot support; consider https://github.com/Foxboron/sbctl instead.

OpenEmbedded layer for the use cases on secure boot, integrity and encryption