Read UEFI Specification 2.3.1C, section 12.3. FAT32 is for a system partition, FAT12/16 is only for removable media. Secure Boot requires that db (the white list database) stores either a public key OR a hash of the loadable. Hashes are perfectly acceptable - loadables do not need to be signed.

Why is organizing a security conference in India newsworthy?