Skip to content

Commit 2f7a8cb

Browse files
committed
lib/efi: Add Microsoft secure boot certs
Taken from microsoft/secureboot_objects@ca77ceb. Signed-off-by: Tu Dinh <[email protected]>
1 parent 8c07f2c commit 2f7a8cb

16 files changed

+6984
-3
lines changed
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.

contrib/secureboot_certs/DB/Hashes/.placeholder

Whitespace-only changes.
Binary file not shown.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,323 @@
1+
{
2+
"$schema": "http://json-schema.org/draft-04/schema#",
3+
"type": "object",
4+
"properties": {
5+
"images": {
6+
"type": "object",
7+
"properties": {
8+
"amd64": {
9+
"type": "array",
10+
"items": [
11+
{
12+
"type": "object",
13+
"properties": {
14+
"authenticodeHash": {
15+
"type": "string",
16+
"description": "Hash of the image using the PE Authenticode hashing standard"
17+
},
18+
"hashType": {
19+
"type": "string",
20+
"enum": ["SHA256"],
21+
"description": "Type of the hashing algorithm, e.g., SHA256"
22+
},
23+
"flatHash": {
24+
"type": "string",
25+
"description": "SHA256 flat hash of the image file"
26+
},
27+
"filename": {
28+
"type": "string",
29+
"description": "Name of the image file"
30+
},
31+
"description": {
32+
"type": "string",
33+
"description": "Additional information for the image or the reason for its addition"
34+
},
35+
"companyName": {
36+
"type": "string",
37+
"description": "Name of the company that authored the image"
38+
},
39+
"dateOfAddition": {
40+
"type": "string",
41+
"format": "date-time",
42+
"description": "Date when the certificate was added to this list in YYYY-MM-DD format"
43+
},
44+
"signingAuthority": {
45+
"type": "string",
46+
"description": "Common name (CN) of the intermediate CA used to sign the image"
47+
}
48+
},
49+
"required": [
50+
"authenticodeHash",
51+
"hashType",
52+
"flatHash",
53+
"filename",
54+
"description",
55+
"companyName",
56+
"dateOfAddition",
57+
"signingAuthority"
58+
]
59+
}
60+
]
61+
},
62+
"x86": {
63+
"type": "array",
64+
"items": [
65+
{
66+
"type": "object",
67+
"properties": {
68+
"authenticodeHash": {
69+
"type": "string",
70+
"description": "Hash of the image using the PE Authenticode hashing standard"
71+
},
72+
"hashType": {
73+
"type": "string",
74+
"enum": ["SHA256"],
75+
"description": "Type of the hashing algorithm, e.g., SHA256"
76+
},
77+
"flatHash": {
78+
"type": "string",
79+
"description": "SHA256 flat hash of the image file"
80+
},
81+
"filename": {
82+
"type": "string",
83+
"description": "Name of the image file"
84+
},
85+
"description": {
86+
"type": "string",
87+
"description": "Additional information for the image or the reason for its addition"
88+
},
89+
"companyName": {
90+
"type": "string",
91+
"description": "Name of the company that authored the image"
92+
},
93+
"dateOfAddition": {
94+
"type": "string",
95+
"format": "date-time",
96+
"description": "Date when the certificate was added to this list in YYYY-MM-DD format"
97+
},
98+
"signingAuthority": {
99+
"type": "string",
100+
"description": "Common name (CN) of the intermediate CA used to sign the image"
101+
}
102+
},
103+
"required": [
104+
"authenticodeHash",
105+
"hashType",
106+
"flatHash",
107+
"filename",
108+
"description",
109+
"companyName",
110+
"dateOfAddition",
111+
"signingAuthority"
112+
]
113+
}
114+
]
115+
},
116+
"arm64": {
117+
"type": "array",
118+
"items": [
119+
{
120+
"type": "object",
121+
"properties": {
122+
"authenticodeHash": {
123+
"type": "string",
124+
"description": "Hash of the image using the PE Authenticode hashing standard"
125+
},
126+
"hashType": {
127+
"type": "string",
128+
"enum": ["SHA256"],
129+
"description": "Type of the hashing algorithm, e.g., SHA256"
130+
},
131+
"flatHash": {
132+
"type": "string",
133+
"description": "SHA256 flat hash of the image file"
134+
},
135+
"filename": {
136+
"type": "string",
137+
"description": "Name of the image file"
138+
},
139+
"description": {
140+
"type": "string",
141+
"description": "Additional information for the image or the reason for its addition"
142+
},
143+
"companyName": {
144+
"type": "string",
145+
"description": "Name of the company that authored the image"
146+
},
147+
"dateOfAddition": {
148+
"type": "string",
149+
"format": "date-time",
150+
"description": "Date when the certificate was added to this list in YYYY-MM-DD format"
151+
},
152+
"signingAuthority": {
153+
"type": "string",
154+
"description": "Common name (CN) of the intermediate CA used to sign the image"
155+
}
156+
},
157+
"required": [
158+
"authenticodeHash",
159+
"hashType",
160+
"flatHash",
161+
"filename",
162+
"description",
163+
"companyName",
164+
"dateOfAddition",
165+
"signingAuthority"
166+
]
167+
}
168+
]
169+
},
170+
"arm": {
171+
"type": "array",
172+
"items": [
173+
{
174+
"type": "object",
175+
"properties": {
176+
"authenticodeHash": {
177+
"type": "string",
178+
"description": "Hash of the image using the PE Authenticode hashing standard"
179+
},
180+
"hashType": {
181+
"type": "string",
182+
"enum": ["SHA256"],
183+
"description": "Type of the hashing algorithm, e.g., SHA256"
184+
},
185+
"flatHash": {
186+
"type": "string",
187+
"description": "SHA256 flat hash of the image file"
188+
},
189+
"filename": {
190+
"type": "string",
191+
"description": "Name of the image file"
192+
},
193+
"description": {
194+
"type": "string",
195+
"description": "Additional information for the image or the reason for its addition"
196+
},
197+
"companyName": {
198+
"type": "string",
199+
"description": "Name of the company that authored the image"
200+
},
201+
"dateOfAddition": {
202+
"type": "string",
203+
"format": "date-time",
204+
"description": "Date when the certificate was added to this list in YYYY-MM-DD format"
205+
},
206+
"signingAuthority": {
207+
"type": "string",
208+
"description": "Common name (CN) of the intermediate CA used to sign the image"
209+
}
210+
},
211+
"required": [
212+
"authenticodeHash",
213+
"hashType",
214+
"flatHash",
215+
"filename",
216+
"description",
217+
"companyName",
218+
"dateOfAddition",
219+
"signingAuthority"
220+
]
221+
}
222+
]
223+
}
224+
},
225+
"required": [
226+
"amd64",
227+
"x86",
228+
"arm64",
229+
"arm"
230+
]
231+
},
232+
"certificates": {
233+
"type": "array",
234+
"items": [
235+
{
236+
"type": "object",
237+
"properties": {
238+
"value": {
239+
"type": "string",
240+
"description": "Path to the certificate file"
241+
},
242+
"subjectName": {
243+
"type": "string",
244+
"description": "Common name (CN) of the subject of the certificate"
245+
},
246+
"issuerName": {
247+
"type": "string",
248+
"description": "Common name (CN) of the issuer of the certificate"
249+
},
250+
"thumbprint": {
251+
"type": "string",
252+
"description": "SHA1 thumbprint of the certificate"
253+
},
254+
"description": {
255+
"type": "string",
256+
"description": "Additional information for the certificate or the reason for its addition"
257+
},
258+
"dateOfAddition": {
259+
"type": "string",
260+
"format": "date-time",
261+
"description": "Date when the certificate was added to this list in YYYY-MM-DD format"
262+
}
263+
},
264+
"required": [
265+
"value",
266+
"subjectName",
267+
"issuerName",
268+
"thumbprint",
269+
"description",
270+
"dateOfAddition"
271+
]
272+
}
273+
]
274+
},
275+
"svns": {
276+
"type": "array",
277+
"items": [
278+
{
279+
"type": "object",
280+
"properties": {
281+
"svnhash": {
282+
"type": "string",
283+
"description": "SVN_DATA value. Byte[0] is the UINT8 version of the SVN_DATA structure. Bytes[1...16] are the GUID of the application being revoked. Little endian. Bytes[17...18] are the Minor SVN number. Litte endian UINT16. Bytes[19...20] are the Major SVN number. Litte endian UINT16.Bytes[21...31] are 11 zero bytes padding."
284+
},
285+
"svnvalue": {
286+
"type": "string",
287+
"description": "SVN version number. Versions less than this version are revoked."
288+
},
289+
"filename": {
290+
"type": "string",
291+
"description": "Name of the image file"
292+
},
293+
"guid": {
294+
"type": "string",
295+
"description": "GUID representation of the image file"
296+
},
297+
"description": {
298+
"type": "string",
299+
"description": "Additional information for the svn, the image or the reason for its addition"
300+
},
301+
"dateOfLastChange": {
302+
"type": "string",
303+
"format": "date-time",
304+
"description": "Date when the SVN was updated most recently, in YYYY-MM-DD format"
305+
}
306+
},
307+
"required": [
308+
"value",
309+
"subjectName",
310+
"issuerName",
311+
"thumbprint",
312+
"description",
313+
"dateOfLastChange "
314+
]
315+
}
316+
]
317+
}
318+
},
319+
"required": [
320+
"images",
321+
"certificates"
322+
]
323+
}

0 commit comments

Comments
 (0)