Struct uefi::proto::shim::ShimLock

#[repr(C)]
pub struct ShimLock { /* private fields */ }

Available on target_arch="i386" or x86-64 or ARM or AArch64 only.

The Shim lock protocol.

This protocol is not part of the UEFI specification, but is installed by the Shim bootloader which is commonly used by Linux distributions to support UEFI Secure Boot. Shim is built with an embedded certificate that is used to validate another EFI application before running it. That application may itself be a bootloader that needs to validate another EFI application before running it, and the shim lock protocol exists to support that.

Implementations

impl ShimLock

pub fn verify(&self, buffer: &[u8]) -> Result

Verify that an EFI application is signed by the certificate embedded in shim.

The buffer’s size must fit in a u32; if that condition is not met then a BAD_BUFFER_SIZE error will be returned and the shim lock protocol will not be called.

pub fn hash(&self, buffer: &[u8], hashes: &mut Hashes) -> Result

Compute the Authenticode Hash of the provided EFI application.

The buffer’s size must fit in a u32; if that condition is not met then a BAD_BUFFER_SIZE error will be returned and the shim lock protocol will not be called.

Trait Implementations

impl Identify for ShimLock

const GUID: Guid

Unique protocol identifier.

impl Protocol for ShimLock

impl !Send for ShimLock

impl !Sync for ShimLock