#verifiedboot — Public Fediverse posts

Information about #SecureBoot and #VerifiedBoot on #Linux systems from the masters of boot, with plenty of diagrams for clarification -->
https://blog.3mdeb.com/2025/2025-07-18-securing-embedded-linux/
@3mdeb

Mobile FOSS-friendly developers could be very helpful by creating a similar explanation about what is "open" and what is "closed," who gets what permissions where, what is proprietary, what is manufacturer controlled and what is owner controlled, etc, and compare #GrapheneOS to #PostMarketOS, #UbuntuTouch, iPhone, and Mobian. @debian

That someone could be me with enough time and effort since no one else seems to be doing it. But it would be quite the study and a comprehensive explanation would require extensive research. The AOSP (non/semi) closure issue remains unclear to many people.

Why can't people just have a good Linux phone with full read write permissions and control their own crypto keys as it the case for workstations?
@postmarketOS

Auditor app version 89 released:

https://github.com/GrapheneOS/Auditor/releases/tag/89

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/22183-auditor-app-version-89-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 88 released:

https://github.com/GrapheneOS/Auditor/releases/tag/88

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/21632-auditor-app-version-88-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 87 released:

https://github.com/GrapheneOS/Auditor/releases/tag/87

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16868-auditor-app-version-87-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 86 released:

https://github.com/GrapheneOS/Auditor/releases/tag/86

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/16094-auditor-app-version-86-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 85 released:

https://github.com/GrapheneOS/Auditor/releases/tag/85

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15578-auditor-app-version-85-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 84 released:

https://github.com/GrapheneOS/Auditor/releases/tag/84

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15343-auditor-app-version-84-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 83 released:

https://github.com/GrapheneOS/Auditor/releases/tag/83

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/15154-auditor-app-version-83-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 82 released:

https://github.com/GrapheneOS/Auditor/releases/tag/82

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/14512-auditor-app-version-82-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 81 released:

https://github.com/GrapheneOS/Auditor/releases/tag/81

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/14500-auditor-app-version-81-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 80 released:

https://github.com/GrapheneOS/Auditor/releases/tag/80

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/12676-auditor-app-version-80-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 79 released:

https://github.com/GrapheneOS/Auditor/releases/tag/79

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/12179-auditor-app-version-79-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 78 released:

https://github.com/GrapheneOS/Auditor/releases/tag/78

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/9761-auditor-app-version-78-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 77 released:

https://github.com/GrapheneOS/Auditor/releases/tag/77

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/8830-auditor-app-version-77-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Did somebody manage to lock the #Android bootloader with #CustomRom (#LineageOS) using custom Android #VerifiedBoot keys? I am looking for some system to sign update images automatically. I don't like the idea of having the bootloader unlocked all the time.

I am strict about this. On the laptop I also use secure boot with a signed kernel with my own keys. There hopefully must be a way to do something like this on phones. Right?

Auditor app version 76 released:

https://github.com/GrapheneOS/Auditor/releases/tag/76

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/8065-auditor-app-version-76-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 75 released:

https://github.com/GrapheneOS/Auditor/releases/tag/75

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/7900-auditor-app-version-75-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 74 released:

https://github.com/GrapheneOS/Auditor/releases/tag/74

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/6368-auditor-app-version-74-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Oh, I completely forgot to announce it here, new blogpost!

This time I talk about Android Verified Boot, and why not supporting it out-of-the-box doesn’t mean that something is inherently insecure.

https://tgrush.bearblog.dev/android-verified-boot/

#Android #Security #VerifiedBoot

Auditor app version 73 released: https://github.com/GrapheneOS/Auditor/releases/tag/73.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/5834-auditor-app-version-73-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 72 released: https://github.com/GrapheneOS/Auditor/releases/tag/72.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/5715-auditor-app-version-72-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 71 released: https://github.com/GrapheneOS/Auditor/releases/tag/71.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/5420-auditor-app-version-71-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

Auditor app version 70 released: https://github.com/GrapheneOS/Auditor/releases/tag/70.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/4972-auditor-app-version-70-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

We currently sign our factory images releases with the signify tool from OpenBSD. It provides tiny signatures that are easy to verify on any distribution with signify in their repositories. This is much less important than in the past because you can verify the completed install.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor #signify #openssh

Auditor app version 69 released: https://github.com/GrapheneOS/Auditor/releases/tag/69.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/4597-auditor-app-version-69-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement #auditor

GrapheneOS requires fs-verity for out-of-band system component updates since our previous release:

https://grapheneos.org/releases#2023012500

This is part of our ongoing verified boot improvements to fix massive flaws we've discovered in the standard Android verified boot which largely break it.

#grapheneos #android #security #vulnerability #VerifiedBoot #MeasuredBoot #attestation

Auditor app version 68 released: https://github.com/GrapheneOS/Auditor/releases/tag/68.

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/3216-auditor-app-version-68-released

See https://attestation.app/about and https://attestation.app/tutorial for info about the app and optional monitoring service.

#GrapheneOS #privacy #security #android #attestation #VerifiedBoot #MeasuredBoot #HSM #SecureElement

GrapheneOS continues to work on improving verified boot and hardware attestation security significantly beyond the basic system in standard Android 13.

As part of this, our app repository client now supports installing fs-verity metadata with packages:

https://grapheneos.social/@GrapheneOS/109746860952845724

#grapheneos #privacy #security #android #verifiedboot #attestation #measuredboot #fsverity #integrity #auditor

Android 13 QPR1 fixed the issues we reported with hardware-based attestation via the secure element for the Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7 and Pixel 7 Pro.

Our Auditor app can now make full use of the bleeding edge hardware-based attestation features on these devices.

#grapheneos #privacy #security #attestation #hsm #verifiedboot #secureboot #measuredboot #android