rufus/res/uefi/readme.txt

This directory contains a flat image of the FAT UEFI:NTFS partition added by
Rufus for NTFS and exFAT UEFI boot support.

See https://github.com/pbatard/uefi-ntfs for more details.

This image, which you can mount as FAT filesystem or open in 7-zip, contains
the following data:

o Secure Boot signed NTFS UEFI drivers, derived from ntfs-3g [1].
  These drivers are the exact same as the read-only binaries from release 1.3,
  except for the addition of Microsoft's Secure Boot signature.
  Note that, per Microsoft's current Secure Boot signing policies, the 32-bit
  ARM driver (ntfs_arm.efi) is not Secure Boot signed.

o Non Secure Boot signed exFAT UEFI drivers from EfiFs [2].
  These drivers are the exact same as the binaries from EfiFs release 1.8 and
  because they are licensed under GPLv3, they cannot be Secure Boot signed.

o Secure Boot signed UEFI:NTFS bootloader binaries [3].
  These drivers are the exact same as the binaries from release 2.2, except for
  the addition of Microsoft's Secure Boot signature.
  Note that, per Microsoft's current Secure Boot signing policies, the 32-bit
  ARM bootloader (bootarm.efi) is not Secure Boot signed.

The above means that, if booting an NTFS partition on an x86_32, x86_64 or ARM64
system, Secure Boot does not need to be disabled.

The FAT partition was created on Debian GNU/Linux using the following commands
  dd if=/dev/zero of=uefi-ntfs.img bs=512 count=2048
  mkfs.vfat -n UEFI_NTFS uefi-ntfs.img
and then mounting the uefi-ntfs.img image and copying the relevant files.

[1] https://github.com/pbatard/ntfs-3g
[2] https://github.com/pbatard/efifs
[3] https://github.com/pbatard/uefi-ntfs
[core] add x86_32 boot for UEFI:NTFS * NB: This increases the compressed executable size by 25K :( * Also set rufus-next to 2.1 2015-03-16 20:34:04 +00:00			`This directory contains a flat image of the FAT UEFI:NTFS partition added by`
[efi] enable the use of exFAT with UEFI:NTFS * Only applies for blank UEFI:NTFS drives for now. UEFI:NTFS Windows drives are still set to use NTFS only (since Windows 7 doesn't support UEFI exFAT boot). 2020-01-30 13:51:19 +00:00			`Rufus for NTFS and exFAT UEFI boot support.`

			`See https://github.com/pbatard/uefi-ntfs for more details.`
[core] enable UEFI NTFS support * This allows no-sweat UEFI support of Windows installation ISOs that contain a >4GB file for instance * This is done through UEFI:TOGO (https://github.com/pbatard/uefi-togo) and the efifs NTFS driver (http://efi.akeo.ie) * Closes #414 * This will also be part of our implementation of #126 2014-12-20 00:22:00 +00:00
			`This image, which you can mount as FAT filesystem or open in 7-zip, contains`
			`the following data:`
[efi] update UEFI:NTFS to latest * Also remove Secure Boot notice since (outside of 32-bit ARM and exFAT) our bootloaders and NTFS drivers are now Secure Boot signed. 2021-10-23 01:49:15 +00:00
			`o Secure Boot signed NTFS UEFI drivers, derived from ntfs-3g [1].`
[efi] update UEFI:NTFS's NTFS drivers to latest * Now uses read-only NTFS drivers v1.3 from https://github.com/pbatard/ntfs-3g. * Like previous ones, aa64, ia32 and x64 versions are Secure Boot signed (but not arm). * Fixes the recent potential vulnerabilities found in https://github.com/tuxera/ntfs-3g. * Note that we have asked Microsoft to add the previous signed NTFS drivers to the UEFI Revocation List, even as we believe that the ntfs-3g vulnerabilities are not exploitable in the limited context of UEFI:NTFS. 2022-06-16 10:54:00 +00:00			`These drivers are the exact same as the read-only binaries from release 1.3,`
[efi] update UEFI:NTFS to latest * Also remove Secure Boot notice since (outside of 32-bit ARM and exFAT) our bootloaders and NTFS drivers are now Secure Boot signed. 2021-10-23 01:49:15 +00:00			`except for the addition of Microsoft's Secure Boot signature.`
			`Note that, per Microsoft's current Secure Boot signing policies, the 32-bit`
			`ARM driver (ntfs_arm.efi) is not Secure Boot signed.`

			`o Non Secure Boot signed exFAT UEFI drivers from EfiFs [2].`
			`These drivers are the exact same as the binaries from EfiFs release 1.8 and`
			`because they are licensed under GPLv3, they cannot be Secure Boot signed.`

			`o Secure Boot signed UEFI:NTFS bootloader binaries [3].`
			`These drivers are the exact same as the binaries from release 2.2, except for`
			`the addition of Microsoft's Secure Boot signature.`
			`Note that, per Microsoft's current Secure Boot signing policies, the 32-bit`
			`ARM bootloader (bootarm.efi) is not Secure Boot signed.`

			`The above means that, if booting an NTFS partition on an x86_32, x86_64 or ARM64`
			`system, Secure Boot does not need to be disabled.`
[core] add x86_32 boot for UEFI:NTFS * NB: This increases the compressed executable size by 25K :( * Also set rufus-next to 2.1 2015-03-16 20:34:04 +00:00
			`The FAT partition was created on Debian GNU/Linux using the following commands`
[efi] update UEFI:NTFS to latest * Also remove Secure Boot notice since (outside of 32-bit ARM and exFAT) our bootloaders and NTFS drivers are now Secure Boot signed. 2021-10-23 01:49:15 +00:00			`dd if=/dev/zero of=uefi-ntfs.img bs=512 count=2048`
[core] enable the installation of a bare UEFI:NTFS in advanced mode * Closes #468 * Also prevent drives with UEFI:NTFS from being listed as multi-partitions * Also add a label for the UEFI:NTFS FAT partition * Also fix internal chver script 2015-03-18 21:34:28 +00:00			`mkfs.vfat -n UEFI_NTFS uefi-ntfs.img`
			`and then mounting the uefi-ntfs.img image and copying the relevant files.`
[efi] update UEFI:NTFS to latest * Also remove Secure Boot notice since (outside of 32-bit ARM and exFAT) our bootloaders and NTFS drivers are now Secure Boot signed. 2021-10-23 01:49:15 +00:00
			`[1] https://github.com/pbatard/ntfs-3g`
			`[2] https://github.com/pbatard/efifs`
			`[3] https://github.com/pbatard/uefi-ntfs`