Use when implementing or reviewing UEFI Secure Boot, shim, MOK enrollment, kernel/module signature verification, or Android Verified Boot 2.0. Covers the chain of trust, PK/KEK/db/dbx databases, vbmeta and rollback indexes, and signature verification flows.
