diff --git a/flake.lock b/flake.lock
index e7e43bb..e7d1f61 100644
--- a/flake.lock
+++ b/flake.lock
@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1697677553,
-        "narHash": "sha256-ozj7HFo/1iQdzZ2U6tHP4QBW59eUbDZ/5HI8lLe9wos=",
+        "lastModified": 1697840921,
+        "narHash": "sha256-zXHwu104SQOxogkMgg+w22c3+zI/FvK83TAkfLmeKw0=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "bc5fa8cd53ef32b9b827f24b993c42a8c4dd913b",
+        "rev": "758ae442227103fa501276e8225609a11c99718e",
         "type": "github"
       },
       "original": {
@@ -97,11 +97,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1697713104,
-        "narHash": "sha256-DN7YOyKMCpAVeZ44N42LrujtTkoerkS9+kTufQiuntY=",
+        "lastModified": 1697935353,
+        "narHash": "sha256-dDwl5ziD24Gs0feke2seFXoQibHafb5XeNDWlUZxCbg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "6be2c349a30fcb489a3153dd331e9df387ab6449",
+        "rev": "8dfad603247387df1df4826b8bea58efc5d012d8",
         "type": "github"
       },
       "original": {
@@ -176,11 +176,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1697681535,
-        "narHash": "sha256-vVkqg+qTgTQ/YEreZyi/eyxoj26yyowI4/5ffTGT90w=",
+        "lastModified": 1697940838,
+        "narHash": "sha256-eyk92QqAoRNC0V99KOcKcBZjLPixxNBS0PRc4KlSQVs=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "d5977a020c216526144dbf08ab0825b6c1121593",
+        "rev": "a3e829c06eadf848f13d109c7648570ce37ebccd",
         "type": "github"
       },
       "original": {
diff --git a/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.key b/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.key
new file mode 100644
index 0000000..93b69b5
--- /dev/null
+++ b/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.key
@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDLRHz4auc0IbxY
+dJT6UHB3SJ3pCt9OQ/p8i5J6wMlywnnN83zUdI+8X8rG9xxao1E3XZcy4va8w42w
+dxOCUy14AxmlbGrxJOcdaj+tXYySlIyjli/0NbKNT3YcrAMSrfd61B/FFGJVJZc4
+9ZxlCvApdCMsxJGX3V67URJemJM3a1/5b97AYMIRnbBfapCz8VHBB81+QB4sEAah
+MjZ0fnWkYDKVeblg4TePZW29pdOU0iTYnMMES7+BCPKOjHIGSdZ0/2vYTk8ZNV52
+7ns7jJx1vCsVHtfRHRfT+EuZrul4VxHM3MNLMkTxpTexBpodMZFlewT+bkcn7F2e
+iwbwGbTEN9UrtgTvI6Ys5lKPS6N4NLJTCh3Pf3qgmgD7GTBTNUWTaPHPajikP4qU
+RGm9RoL3IZJTEg7Gno2a6lmgcJ3OgdSELJfO55GkfBh7GX2h2aQHQ31MtctaEvFy
+T/Rppu4HdC93MaKRr868/+0Mz+mSnCCIUvicbZ9r8XKwvRsfABS+9GhDzk5tenSW
+dYiw4io6oA8bgTZXNbbpZGH2oNIU6HMguHx2tLGVBMHJFhytWENgTCJDjn0yFFPC
+pQdsFjwpYJfeznIwciPKUCFmol6T3bJMW3pkrgaXzu4grXaEar3WPi+NcZbxaT2G
+tvdD/2Epye2By53drkXU1bXUuqLoSwIDAQABAoICAB3w5S2cZZkOvRUUextR/Pb9
+GdGJefIn3j45Oubc/e9rCREWpBURZFi9jXt4S9NoCh8LKKnkt65/aaAMMjH4uZJb
+dowg57HEm0yAaYfKZ1nyCrNP/JlOzZG2GjJH/h3ixTjxBQr9ISzkoB1SRGq3zT91
+7XZ7L+z8PSd/XiLT+59msBjoaxnQRtXcce3kHxN6YO37jb/ihu87nxZgdJf9Rqvj
+RaAx8WX9VrdHG/6a7gsWVzoXATzhQYCqxjvMIUGe37mVJBgVFN6kN1lycHGJmURY
+ZsoyJF0XmXpuMQietKI2xRb1j8jES1aC3Sy0yb+yHPYjRE2MBewyC2o+lVOJndAk
+KpWMJ1Miv1oMnvH25JICdbq5tFgX6DCSC2vG73T04DuBogPxX+t2M3iPEdkAKbLQ
+ScIk7jjwhcyY7yAEwszO69daDtz+iR/QsbmD2TtBhgOkgSOvcFAAnNn17Wcbx4wt
+LcSzPW2wHFm76z6WgfVx4LYteXahit2UASha3wi+suhEcEL02CwwD2whXmgAXTuo
+aU8UF+fdZFleTFsNJ+cBMAJJ7+QHUpMK3rW3TeWDAcRrfyfvqeLIBFkQzjrKeJNv
+e30Y0ori3ae/+4nfdIgaLeYhpLuex+jWO9u/cUdGyPDhu5d2LUcig47kCpm9Ke7u
+kYoYj1pztu/5NbWVzWKxAoIBAQDmLAs3WjccTEvZ3uHLS2aRLbL4WD8AjAEFvQR+
+7m4XVa8C7ripPWOHRIjUwota9B6l/Pn5LkUn66dJRFx4LrpPnj9TrxJimcf5gASF
+D0hywOKdlwCq9e90PLuOdFuns5SfIuWn4S5WDVuiTdxmWwu/53Zs0nKubjukIB7i
+Sip10ebBKPObY7e6TpMRydUcRJONQCnF9lpclL/hf9VqtjQSgp7LtVwkTk3Ldi3Y
+Vd9ce90CPamCdERNGJQRXaTCP0XiPYF/UanAVJRkalUrvSmR5ER4CKB8M7lxjK8f
+KSZW1kVRWk7qHyNXoeLwtZmoAX47Ko3PrBMBWxtsVigVPYJRAoIBAQDiE5TQRNNe
+JdCN+8U2qQ9lqAyxR+xgiLLaJ/2YFwROvXTWTkEv3EveKFmSrHvQkdssvaiVHxf9
+x55aAa69DLfxwP7GGf5r55v3ztWpS3zFda6crUNeWtxtfaHaAd0XYgQR83+Er9kG
+75f1//g2Tso49/OLEPVb0A9h3lCQg2XPLf0DMcBsiffehd+6Ls+2iVOZ+doh2hcK
+erpyQAKzemaKoCEh50/VtJazzk1r2aNNzt+vyi1uMwCiwEPGSwz2Ge3mkv5Szzoc
+SBgHw7Ht5tcSKn5wom9OrOq+yuV5pLA34olPQi28UFLGV58QkAjVlfOmMRTkNiFq
+uow4M+/bnV3bAoIBAA/RhxPOx2rSc4QNpUbrb6kakuouZmYLOSbDzsNKb5Z69QQm
+k9pNtcFeHGlC1YDytgiCUkulumr77wtB/3ji/TrrjT6bEZBlMTEcczMR0dDRIMHj
+1s/pBwPeCKXJqWLlHJmzNEVNXHndgSauYy9FopEVvzXLYMZMHR0yd+zlW/Ws70bn
+IZbUS5QqQkE+tb6zl9BlUHmibKNgNa+xsWEcFIgRIgit9h8oooARJyVvAWLBwHae
+9j9Y7ji+L67h2Kjg4FSkFXpCioAFUA12oVPYNDsqjOoS7bSbeWssV/y0P0ZIg4sL
+wdClQzCKl6YjVOQO9jXqvsQ+9y9oq4HOigKrr4ECggEAQoaKkuK95AVyomVE+jmz
+azGRUpWcjCeNob6E1D1pqhX8DJgIfKHxvVTYTt3srUpOWZMRyZfVwnr8MPYvyje0
+5THqhrbddDk6XyiBHQk2lRB1Kmud2GUaWinO98z2l0vjcLjbfFsWnQDiEaSaELkM
+rsjf5Ls/yB2oeR8nS+8uhVG+EzOPsSDETLnORQZDXy536GZqdu2rPA0zUi1d3hyV
+khNezJA5oOQ8OHrrs2HeuSW4Ew2GYtglRr8W8oHhNYYZyHDW391U9z+LurUuZZg5
+D4JrpI9X+6nMhgpEjpAUvs0tpKIPvUtRoEXma8RGpTsz8GKfCCyZlsOAQYWe/lwH
+YwKCAQEAlwg2ZfiB3SQYHs5Ol8+4EiPhcPypNa/HOWQLAYEpLkKWupHmemA5NnRk
+R7Y9WuIfnCT5hQqQi45RQooALQS6nsf85+EcCBE/hMyBIxYLaGg1Z0xKGwTpSzjY
+CNEeBATc3uA5U+I463prYvEwyhArvZWqE5i9VwfyXKoULTbu0idUoCIGfox5EsYW
+p9O423mqVg7w9x6TJqAMCZbel/3RUqPVmXjgipIkpvv78Dc4xgFvq3ogzzz2nj5B
+v8NOJYjUT+MqIsA3jEyaOxwp8EWWesSm3szKdZ1Whip7283wC38uR2NhQXpYTsK5
+k42RBGxeXjyj76lBwyzEDiQPCD17KQ==
+-----END PRIVATE KEY-----
diff --git a/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.pem b/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.pem
new file mode 100644
index 0000000..6316341
--- /dev/null
+++ b/nix/tests/fixtures/uefi-keys/keys/dbx/dbx.pem
@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----
+MIIFETCCAvkCFFLW1rU/xEmQTR/4e+MtQFMRs+2+MA0GCSqGSIb3DQEBCwUAMEUx
+CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl
+cm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMjMxMDIzMjIxODUyWhcNMjQxMDIyMjIx
+ODUyWjBFMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UE
+CgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIICIjANBgkqhkiG9w0BAQEFAAOC
+Ag8AMIICCgKCAgEAy0R8+GrnNCG8WHSU+lBwd0id6QrfTkP6fIuSesDJcsJ5zfN8
+1HSPvF/KxvccWqNRN12XMuL2vMONsHcTglMteAMZpWxq8STnHWo/rV2MkpSMo5Yv
+9DWyjU92HKwDEq33etQfxRRiVSWXOPWcZQrwKXQjLMSRl91eu1ESXpiTN2tf+W/e
+wGDCEZ2wX2qQs/FRwQfNfkAeLBAGoTI2dH51pGAylXm5YOE3j2VtvaXTlNIk2JzD
+BEu/gQjyjoxyBknWdP9r2E5PGTVedu57O4ycdbwrFR7X0R0X0/hLma7peFcRzNzD
+SzJE8aU3sQaaHTGRZXsE/m5HJ+xdnosG8Bm0xDfVK7YE7yOmLOZSj0ujeDSyUwod
+z396oJoA+xkwUzVFk2jxz2o4pD+KlERpvUaC9yGSUxIOxp6NmupZoHCdzoHUhCyX
+zueRpHwYexl9odmkB0N9TLXLWhLxck/0aabuB3QvdzGika/OvP/tDM/pkpwgiFL4
+nG2fa/FysL0bHwAUvvRoQ85ObXp0lnWIsOIqOqAPG4E2VzW26WRh9qDSFOhzILh8
+drSxlQTByRYcrVhDYEwiQ459MhRTwqUHbBY8KWCX3s5yMHIjylAhZqJek92yTFt6
+ZK4Gl87uIK12hGq91j4vjXGW8Wk9hrb3Q/9hKcntgcud3a5F1NW11Lqi6EsCAwEA
+ATANBgkqhkiG9w0BAQsFAAOCAgEArgmgnbkhr0aZh03NtpAULD3sA/o5hjFq3tZH
+A4189iS0rKKqDWo+Kt8a1xJaA+2pfmRTEWLbsehzg1j9avLs/sZET7Sz4EqtBRPh
+D3nLeCAYw1K8x2/FZTOZ9xUSe9Zn2Be9HWlnhKFIslnO3SXlVbXb6efU8FAy01pG
+LErLFSTSUmYAI+fmi2cNARJ2DvLM+EleQ0uHyOIbVnU3CiJgqRV9uPkAX7oKsfLk
+lRIgN1bxizB+LRlVFNaPIPiPXDFJ9JSP+7gzqFiwnXXp6TjOU/f8LWwcf4GqXA7E
+18t9h41l3jKzo75imVNuoQkapVtYBcofCNxF305jh50KUPHyQhVD0lHmjC3FddYA
+fSI+Y+5LP6IUUJhPi4K3P9t8g4yLmoAfzLirzCEuM0jEI3+ZDLvyK35oEXPJ/61Q
+/wafWPq6/JBLxPqJ6XrnKH8AOJVGBJWS0o1MDohop4/yrLZfZljBH0sEFC9Xwqok
+HYy/SA7YbQvr23L1XYt5jYSQ/J784vHMRo2TH9vqeyVVv8y01GBjgojUfGnKg/jq
+zgF+EnWan8XQa9mPT3zMhqCyVINkoPq0BoAd5XP/EUzXRWWe1fd8Kyp8cL+tAD9w
+yo9T4oniQPdTD3EdaFqhZfIBQUCQyYxjkgDi1/aJK8PggHrIHdbPuKZAqhuUTT/a
+2Y+S2Pc=
+-----END CERTIFICATE-----
diff --git a/rust/tool/Cargo.lock b/rust/tool/Cargo.lock
index 521696e..810aeaf 100644
--- a/rust/tool/Cargo.lock
+++ b/rust/tool/Cargo.lock
@@ -241,9 +241,9 @@ checksum = "e496a50fda8aacccc86d7529e2c1e0892dbd0f898a6b5645b5561b89c3210efa"
 
 [[package]]
 name = "cpufeatures"
-version = "0.2.9"
+version = "0.2.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a17b76ff3a4162b0b27f354a0c87015ddad39d35f9c0c36607a3bdd175dde1f1"
+checksum = "3fbc60abd742b35f2492f808e1abbb83d45f72db402e14c55057edc9c7b1e9e4"
 dependencies = [
  "libc",
 ]
diff --git a/rust/uefi/Cargo.lock b/rust/uefi/Cargo.lock
index 08a93a8..2ac0c0b 100644
--- a/rust/uefi/Cargo.lock
+++ b/rust/uefi/Cargo.lock
@@ -31,9 +31,9 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
 
 [[package]]
 name = "cpufeatures"
-version = "0.2.9"
+version = "0.2.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a17b76ff3a4162b0b27f354a0c87015ddad39d35f9c0c36607a3bdd175dde1f1"
+checksum = "3fbc60abd742b35f2492f808e1abbb83d45f72db402e14c55057edc9c7b1e9e4"
 dependencies = [
  "libc",
 ]