cummiboot Encrypted PCR locked EFI Linux bootloader with Microsoft Pluton. Builds a ~10kb EFI bootloader for Linux which decrypts the kernel and initrd using a PCR policy locked key loaded into the TPM.