{"id":13680809,"url":"https://github.com/tsunghowu/DiskImageCreator","last_synced_at":"2025-04-30T00:31:08.014Z","repository":{"id":86310522,"uuid":"127361723","full_name":"tsunghowu/DiskImageCreator","owner":"tsunghowu","description":"A python utility to process the input raw disk image and sign MBR/partitions with given corresponding keys. This tool is designed to help people attack the machine with a secure chain-of-trust boot process in UEFI BIOS.","archived":false,"fork":false,"pushed_at":"2018-03-30T17:26:09.000Z","size":46196,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-11-11T23:37:52.595Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tsunghowu.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2018-03-30T00:37:36.000Z","updated_at":"2023-12-27T16:18:30.000Z","dependencies_parsed_at":"2023-03-05T03:15:34.406Z","dependency_job_id":null,"html_url":"https://github.com/tsunghowu/DiskImageCreator","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tsunghowu%2FDiskImageCreator","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tsunghowu%2FDiskImageCreator/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tsunghowu%2FDiskImageCreator/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tsunghowu%2FDiskImageCreator/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tsunghowu","download_url":"https://codeload.github.com/tsunghowu/DiskImageCreator/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251607502,"owners_count":21616775,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-02T13:01:22.271Z","updated_at":"2025-04-30T00:31:03.004Z","avatar_url":"https://github.com/tsunghowu.png","language":"Python","funding_links":[],"categories":["Python"],"sub_categories":[],"readme":"# Signing Tool for boot security validation. \n\n\nThis python utility is designed to provide a baseline for people who may\nbe interested in attaching the machine with secure boot process built-in. \nThe secure boot process is a customized chain-of-trust boot flow in UEFI \nBIOS. It will exam the target disk image(in MBR) and see if it is properly \nsigned by the root key controlled by owner. This utility is to help owner \nto create a signed image with owner keys. \n\n## Prerequisite  :\n Python 2.7\n  * rsa\n  * json\n## Usage: \npython2_7 signing.py config_file.json\n\nSee .json files for more details. \n* Note: HashingType: 1 is for SHA-1, 2 is for SHA-256.\n\nEach json file describes the root key file for the entire control block \nand how to sign(RSA-2048/4096, SHA-1/SHA-256) on each paritition with \ngiven paritition keys. \n\nThe file TESTDATA.BIN is the disk image that I used spfdisk to create.\n\n* config_2048.json : sign the configuration block with rsa-2048+SHA-1\n* config_2048-SHA-256.json : sign the configuration block with rsa-2048+SHA-256\n* config_4096.json : sign the configuration block with rsa-4096+SHA-1\n* config_4096_S2-S1-All.json : sign the configuration block with rsa-4096+SHA-256 but use SHA-1 for partitions.\n* config_4096_SHA-256.json : sign the configuration block with rsa-4096+SHA-256. This\ncase is to show you how much time it will take on hashing computing for each partitions. \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftsunghowu%2FDiskImageCreator","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftsunghowu%2FDiskImageCreator","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftsunghowu%2FDiskImageCreator/lists"}