prehistoric-systems/privacyguides.org
1
0
Fork 0
mirror of https://github.com/privacyguides/privacyguides.org.git synced 2026-03-11 08:54:41 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add secure boot key chain graph

Browse source
This commit is contained in:
fria 2025-10-27 06:47:07 -05:00 committed by GitHub
parent ee89decd7e
commit dd9094ba45
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
blog/posts/secure-boot.md
View file

@ -57,4 +57,18 @@ UEFI defines a standard interface for communication between firmware and the ope
Some of these improvements include support for drives larger than 2 terabytes, support for graphical user interfaces in the setup utility with mouse support, support for initializing hardware devices in parallel instead of one after the other, significantly improving boot times, and support for running in 64 bit instead of 16 bit mode.
Along with all of this, UEFI also supports Secure Boot, security feature that allows you to
### Secure Boot
Along with all of this, UEFI also supports Secure Boot, security feature that allows you to verify the firmware, bootloader, and OS hasn't been tampered with.
Secure Boot relies on public key infrastructure (PKI) to validate these components.
It uses key chaining, with the keys verifying the keys further down the chain.
``` mermaid
graph LR
A[Platform Key] --> B[Key Exchange Key];
B --> C[Signature Database];
B --> D[Revoked Signature Database];
E[Secure Firmware Update Key]
```