A framework for secure booting, building on top of whatever secure booting functionality the firmware provides and then taking over from there.