On Thu, 11 Nov 2021 at 15:50, Andy Shevchenko <andy.shevchenko@xxxxxxxxx> wrote: > I was thinking about SHA256 hashes or so (as they tell about > binaries). In any case the interface for this seems to be in the > kernel. I'm quite sure you don't want to put those EFI format decoders in the kernel; there is all kinds of weird compression schemes, volumes are recursive, and vendors like to hide weird things in the undocumented (or reserved) areas. Richard.