Lib.rs

› Cryptography
#efi #uefi #pe #authenticode #secure-boot

nightly efi_signer

A crates for signing and parsing EFI image

by lcr

11 releases

0.2.8 Dec 18, 2024
0.2.7 Nov 13, 2023
0.2.4 Jun 29, 2023
0.2.2 May 21, 2023
0.1.1 May 4, 2023

#492 in Cryptography

Download history 20/week @ 2024-11-16 22/week @ 2024-11-23 108/week @ 2024-11-30 298/week @ 2024-12-07 209/week @ 2024-12-14 66/week @ 2024-12-21 57/week @ 2024-12-28 94/week @ 2025-01-04 78/week @ 2025-01-11 24/week @ 2025-01-18 28/week @ 2025-01-25 47/week @ 2025-02-01 66/week @ 2025-02-08 51/week @ 2025-02-15 33/week @ 2025-02-22 27/week @ 2025-03-01

186 downloads per month

MulanPSL-2.0

1MB
860 lines

Contains (DOS exe, 1MB) tests/shimx64.efi.dualsigned, (DOS exe, 1MB) tests/shimx64.efi, (DOS exe, 1MB) tests/shimx64.efi.signed

EFI_SIGNER

Coverage Status cargo license

A pure rust library to sign/verify the EFI image.

HOWs

see examples

how to sign a EFI image

  1. generate certificates

    bash -ex scripts/make_codesign_cert.sh

  2. sign a EFI image

    ./main sign --key key.pem --cert certificate.p7b shimx64.efi shimx64.efi.signed

  3. sign a EFI image with detached signature

    ./main sign --key key.pem --cert certificate.p7b -d shimx64.efi efi.signed

    the efi.signed file will onlyl contain the signature itself which can be used by set_authenticode

how to parse the EFI image

./main --verbose parse shimx64.efi

Dependencies

~20–36MB
~583K SLoC