←back to thread

Patina: a Rust implementation of UEFI firmware

(github.com)
132 points hasheddan | 2 comments | 10 Oct 25 21:02 UTC | HN request time: 0s | source
Show context
treffer ◴[11 Oct 25 10:25 UTC] No.45547992[source]▶
Interesting. But who is OpenDevicePartnership?

Looking at the members on the repository this seems to be a Microsoft project?

replies(1): >>45548383 #
mariuolo ◴[11 Oct 25 11:45 UTC] No.45548383[source]▶
Can one even do UEFI firmware projects without at least keeping Microsoft in the loop?

As far as I remmeber, they control the issuance of keys for bootloaders. Or is this project supposed to do away with that?

replies(5): >>45551246 #>>45551954 #>>45670901 #>>45672708 #>>45674194 #
7bit ◴[11 Oct 25 19:29 UTC] No.45551954[source]▶
Already today you can remove the Microsoft keys from most mein board's UEFI and enroll your own. You can perfectly make your own UEFI implementation without Microsoft.
replies(1): >>45671044 #
1. BonusPlay ◴[22 Oct 25 15:54 UTC] No.45671044[source]▶
Except that many component manufacturers release their efi capsules signed with Microsoft PKI. So no, you can't fully remove them if you want to verify updates.
replies(1): >>45671887 #
2. zamadatix ◴[22 Oct 25 16:51 UTC] No.45671887[source]▶
While "So no, you can't fully remove them if you want to verify updates" is a valid point, it's also an answer to a different question than the one asked.