A new bootable USB solution.

• UpdatedFeb 1, 2026
• C

The Reliable USB Formatting Utility

• UpdatedFeb 17, 2026
• C

💻 🔒 🔑 Secure Boot key manager

• UpdatedNov 30, 2025
• Go

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

• UpdatedFeb 13, 2026
• Java

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

• UpdatedSep 27, 2023
• C

Jo's Embedded Serial File System (for Standard Serial NOR-Flash)

• UpdatedFeb 14, 2026
• C

Generate and sign kernel images for UEFI Secure Boot on Arch Linux

• UpdatedAug 2, 2023
• Shell

Linux UEFI library written in pure Go.

• UpdatedOct 10, 2025
• Go

PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables as well as scripts for other Secure Boot related items.

• UpdatedFeb 12, 2026
• PowerShell

attestation.app remote attestation server. Server code for use with the Auditor app:https://github.com/GrapheneOS/Auditor. It provides two services: submission of attestation data samples and a remote attestation implementation with email alerts to go along with the local implementation based on QR code scanning in the app.

• UpdatedFeb 20, 2026
• Java

UEFI Secure Boot for Arch Linux + btrfs snapshot recovery

• UpdatedJul 18, 2024
• Shell

OpenEmbedded/Yocto BSP layer for STM32MP15x based MPUs

• UpdatedFeb 24, 2025
• BitBake

Mosby – More Secure Secure Boot

• UpdatedJan 13, 2026
• C

Unsigned code loader for Exynos BootROM

• UpdatedAug 13, 2020
• C

Tutorial to create full disk encryption with YubiKey, encrypted boot partition and secure boot with UEFI

• UpdatedOct 24, 2019
• Shell

A comprehensive guide to installing Arch Linux with all of the modern features.

• UpdatedAug 3, 2025

Punchboot

• UpdatedFeb 16, 2026
• C

The sequel to Voyager

• UpdatedAug 21, 2024
• C

Unsigned code loader for Amlogic BootROM

• UpdatedNov 6, 2022
• C

MultiZone® Security TEE is the quick and safe way to add security and separation to any RISC-V processors. The RISC-V standard ISA doesn't define TrustZone-like primitives to provide hardware separation. To shield critical functionality from untrusted third-party components, MultiZone provides hardware-enforced, software-defined separation of multi

• UpdatedJan 24, 2024
• C