Linux kernel module signing for SecureBoot

Virtual Box and secure boot

This Yocto meta-layer is dedicated to building a hardened and secure operating system for the Raspberry Pi 4, leveraging kernel hardening techniques, SELinux enforcement, and much more

This is a project for the Operating Systems for Embedded Systems course at Politecnico di Torino in the academic year 2022/2023. The topic for this year's course was Hardware Security. Our project is "Secure bootstrapping for ARM MCUs". We implemented a lightweight secure boot process which is based on performance counters.

Secure Boot Helper

Secure-Boot-Sign-Modules - sign not signed kernel modules for Secure Boot

alpm/pacman hook to automatically sign efi binary after package updates.

another one repo with helper scripts for usbarmory platform

Ansible role to configure direct UKI booting on Fedora 40.

aarch64 bootloader for Linux

Generate signed Unified Kernel Images

UEFI + Btrfs + Secure Boot + Unified Kernel Image + Encrypted Root

Northern Lights development repository. Pull requests are not yet accepted

Linux Fedora Installation Guide on Dell 2 in 1 Convertible with a UEFI BIOS. This guide discusses how to make a Fedora Bootable USB on Windows and Linux, modify the UEFI BIOS Setup for Linux Installation, gives a beginner overview of the GNOME Desktop environment and how to customise it with tweaks and extensions.

Linux Installation Guide (Fedora and Ubuntu) on Dell 2 in 1 Convertible with a UEFI BIOS. This guide discusses how to make a Bootable USB on Windows and Linux, modify the UEFI BIOS Setup for Linux Installation, gives a beginner overview of the GNOME Desktop environment and how to customise it with tweaks and extensions.

Sign the updated bootloader and kernel using pacman hooks.

USB OTP Security System: A project combining the ESP32-S3 microcontroller, ATECC608A CryptoAuthentication device, Windows driver, and LibUSB for secure communication, OTP generation, and time synchronization. 🚀

Utilities to manage Secure Boot signatures

Manage shim openssl certificates for efi Secure Boot.

Bootloader implementation for embedded systems. Designed to be portable across different microcontrollers, with examples provided for STM32 integration. It includes: Firmware Update using python GUI tool, Secure Boot (RSA/ECC).