Worked on the kairos-io/AuroraBoot repository to deliver hardware-backed TPM key support by integrating PKCS#11 URI handling for PCR private keys within the UKI configuration workflow. The implementation, written in Go, bypassed traditional file existence checks when a PKCS#11 URI was provided, enabling direct use of hardware-backed key storage and enhancing the system’s security posture. This approach reduced the attack surface associated with private key management by leveraging TPM-backed provisioning through PKCS#11. The work focused on security and maintainability, with all changes prepared for collaborative review, and demonstrated a strong understanding of Go, PKCS#11, and TPM integration.