Hi,
Secure boot in the not too far future may need to support PQC including PKCS#7
message parsing and X.509 certificate handling. leancrypto offers now support
for being compiled to provide its services in the EFI environment to support
secure boot with ML-DSA or SLH-DSA along with PKCS#7 and X.509 stack-only as
well as heap support.
For details about using leancrypto with EFI, see [1].
Adoptions to other environments with similar constraints as EFI (e.g. not
having any kind of environment like POSIX or similar) should now be straight
forward.
[1]
https://leancrypto.org/leancrypto/efi
Ciao
Stephan